last executing test programs: 2m5.384491106s ago: executing program 4 (id=2081): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) close(0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4000009b, 0x0, 0xff}]}) 2m5.223082827s ago: executing program 4 (id=2084): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) tkill(r0, 0x7) 2m5.059809385s ago: executing program 4 (id=2085): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2m4.99104042s ago: executing program 4 (id=2086): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 2m4.924628766s ago: executing program 4 (id=2088): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x84}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 2m4.610867624s ago: executing program 4 (id=2089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x3) 2m4.295741542s ago: executing program 32 (id=2089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x3) 1m22.547865199s ago: executing program 5 (id=2461): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000f8fe68ca0000000010000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r2, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) 1m22.435856111s ago: executing program 5 (id=2462): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r2, r2, r1, 0x0) 1m22.32143756s ago: executing program 5 (id=2464): openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100, 0x0, 0x19b}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) 1m22.16994042s ago: executing program 5 (id=2465): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 1m22.06352786s ago: executing program 5 (id=2467): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143982) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) 1m21.804908383s ago: executing program 5 (id=2470): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 1m21.383035588s ago: executing program 33 (id=2470): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 24.231166359s ago: executing program 2 (id=2950): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x9e3a, 0x10100, 0x80000, 0x1bd}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 24.124825733s ago: executing program 2 (id=2951): r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 24.114303328s ago: executing program 2 (id=2952): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) 23.983757778s ago: executing program 2 (id=2954): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1) 23.834072668s ago: executing program 2 (id=2956): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000071, 0x0, 0xff000000000c0700}]}) 23.708230215s ago: executing program 2 (id=2957): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000014}) epoll_wait(r2, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xa0000001}) 23.300652777s ago: executing program 34 (id=2957): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000014}) epoll_wait(r2, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xa0000001}) 4.620858525s ago: executing program 3 (id=3150): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, &(0x7f0000000000)={0x0, 0x9, 0x61, {0x61, 0x30, "85262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd7cc5f1948846c8cd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020019000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 2.532393806s ago: executing program 3 (id=3173): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e33, 0x7, @mcast2}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb31}], 0x1, 0x40002042, 0x0) 1.853051221s ago: executing program 3 (id=3184): r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000480)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000040)={0x1, 0xfffff800, 0x1, 0xfffffffe, 0x8, 0x107, 0x141, 0x11, 0x1, 0x40, 0x60, 0x1}) 1.422577996s ago: executing program 0 (id=3192): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x44040) recvmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.343879564s ago: executing program 6 (id=3193): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000340), 0xffff, r3}, 0x38) 1.343592556s ago: executing program 1 (id=3194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, {0x2000, 0x5000, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2}, {0x8080000, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0xf0, 0x0, 0xdd00, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000000c0)) 1.272623787s ago: executing program 0 (id=3195): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000004dc0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="1a326d384a805032", 0x8}, {&(0x7f0000000440)="8bddb365d770c4", 0x7}, {&(0x7f0000000140)="a467295c632a535f40", 0x9}], 0x3, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x480c0}], 0x1, 0x48080) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000010080)=""/182, 0xb6}], 0x1}, 0x2120) 1.259392136s ago: executing program 6 (id=3196): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000008280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f0000001ec0)={&(0x7f00000021c0)={0x50, 0x0, 0x8, {0x7, 0x29, 0x9f53, 0x10000008, 0xc0f7, 0x48e, 0x8, 0x8002, 0x0, 0x0, 0x80, 0x101}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000000)="d2c113c29ca1f0329c09333c4e57bb838cfea716579dab7d1cbdce058b04b86cd2573f5a46ec9ad1bb3c276903ebcad8758f3bdb0ea994c5ea01d7771c5b21040018c812e3b3d2c92d14193a28633e7a06c3239d8e97c69f11a821f535082d74ee0c1925c46bfba566d8c9647889a9dde67089b24871471415a695730085f81a0b7c8dc2eae85ccd015b85d7d1fecd2528f2a8369ee0315327ba0d506a583c716ea4fa23575566c8cf1a2a844691717179b82f10998b7d540188e57e864820665ab70db2d483c4fdcb115ea6bbd4a888f9d383f6fea063635b69686590f540c638a77fe8e8cb266cf72667e61871faf1d1810c749c30c5a7b61609d81114f7aa0355967a7513f659d021338ddb687b0f7372386170902b612c56f58dc73a1ccecb389ccd39f926ee91220a5c053dc277919ed4e32b63da14781cb46227a71388f2aeb37e8971d4a554824bb05f7e6861a916c94204feae48f115680a40b7b2da6ec3af295979016cb78ee53d347a2a8de81c26d0468db8b59df449513e109f26ccdff64403180deba17211813b69ef3f0c42f498a6f3d05a4e7f47f99a8b9ff6bb375fcd1cf444a794a7c2a274f2786c8c220b1f80f2d0c1f311960b37357e31198a44f1e25aaa320f6daad7a42c0367de29a2d0d5567098dfc4ac2b0393a7accfaed79afeec5c9d526503e8fbbd3d1f6365c698775999e5109bada3ec51a9d4b884631086bcfa4fe99135a7c482d9e3d2cbd0a58a42f8cd737a812c21185d909bab234d412bd450da975be70eac2a8db479f7030ff5f41817cd798d59a2db9d8d829765459531044ba3bfa6fc89d046c75e707133e5211fd05d20f63d4f493b23bcd966e3f4314a512451b761fb3b3ed815da07c604f71d2a86937142ede6fce427766dbde15f74f2c45d4c3c08e815b507bb05ee97ddf7ed79ea2ddd5c6ef057d455d84c79bdfd6e68ba6f5cd806a6b9dfd5ed65e394554fb59df7aba2676779a547cf8a7c97379abc760e94e01264a2a23c8c63296ec0d9a4e0aa5c9c470fe46beb8db8322372f3649b7d2ad0b8d09e77e4757a2f40835860b56d41382fabc35d891deedd2168ff3b20f3345ec3238ce795fd9b0311fbd7cf10bbefe4e9349bdf7ea5294f3fc3ded1203c01c9a057641ea122eea48e30b942fdebdc4e7263353361dfcf3562eb3f7eb491fe5394ac1e9af734950b3de71b557bd1baf334d39c5dd9e6842a3ef24004eafc5eb85fbdad5c1e49f60f565da146b119f27ec9077774e21300edf2883f34e299ae0465779ab80ba2d097f5d791a72785f35090dbc369864476c33d3279382a49ac45be1706211659d6fac1ae12d772fa270eb3746a69082e67664f4be335f2d172d52f5083a0768e5d4332352be40eb41e3406de4498e740a470141032ea251c144cdb5352d8049281898c72f13a5d3509c9c77308fe45016abfd7d42b1a022a60b9a5bbcece7c0a10bf9f157995465729b38fdcadd0d977574636206982a6b4e8f24bc75e3eb054fb9ae81e878afd24cfa9756f053bb89f0e4a42e195bd2af8a91a6dd5c9fbccd938681a7387ed22a0e3a8284d3182aa7ef1905a267850fc405494d7079f6d0364287cf7b16dc2310b15bc49fb68d1a96075cb5f30f4fc2ec0c51d0b7e806e78f108f4060a55b8c23b3c89a2f2fa321d5138019c417a504d230ec496583933daba2998e20d8f9a2e6798f681e1d4df88fa4e084513d3648ed4f6624d8b894470cf325e837ad177a634bf58d21378fa0d3370bcb724fa88314bbd0749bbe6ff9dd5d7826701891c180278833c3327a8b1500c3e86fbdaacaaba0e0f708052ddecaae4fe142689c812aeccc7211f61159e0787a8f639d1f0a4db373c17317fea5d3ca1c6060fc44a2d02502f0230334acb69861f0cdb82220827f5887a14e7eab133ce4ecd9a414b2a6b31d8c631325319bbb65ad01aaea7e157fea6cbb434c67f4582028c32f5890ceb243dc972e61e122cb36840d5838dff32d4b613ae1909f3970404fb1973f1e80b0e388141b2e24d47276be045880a4ac18fd136c08cf266b35c75e9b796f6210817439833b613195fe4688b22127a978d20f8b32e3df3297e09a565e659857d8052bf69c5006c5870bd25e6c3aeb411553924d06ccb849cdeca659448cb220d259b4ee20d256d44149814b5e13ab365c448369a43553e01874acded99d24da7d1c9c283dae95b0b5311344af85c7c9a8483fb18a5bfd7a4fb4bbade211edfa4c30f3d1b5bc9672a02adb5d638faea66424e2c82540937dc4cf21392fe16e05811f1bcfb83132deb1cf2a522f9b543758b25d6949400af5d2a7a566f4ab0f5fe0b0a8e8379850e3ed78cb823f5b59b3df4de700427b197720ec69b86c76080b2cfdc4a2619e9d2a901e247e591d79dea91257c0d4a3c7ebb86af42de6833aaaa2d69b71e684236705744b79c62079236759def4a37a0b97742dcdc1af8e54385ad496af31cffe7539e4a69d65ae28845439e5e3eea34785e6065c32f3c7b71ef4edfdb16ca9ee9d5d4e066a60f9919461ce932a61c4100276dad7a22447c681bfebac9186f23dd38509090e0c0fd60219d33174d0d1f5a2b3eb194ae1c7003b159dd560e909fcd0b14b803ded8a94f2a61ca59f9015a673c018515b7605512ecdec58b60aafcba88e88b790e6dabc09a6721613d4e60ffd8d01b07ccacc1c7f2415347f5f5aa9eb7e5d27090403a55d0364721bf0363e34bdf9d92c8e83fe39e8d23e0a038717c00f82dd27709ea69a7a857575f0e039b067750b0e226dd01091b6aecae409d563a72e0805c8c101401a9d4356c532ec27cf25ad0ea92eb137e5bb367623155b3e62baa1cb29d86e4765a635d180d26f37f58a24683494cca93547b1f9ff0cc81c085cc4509b746c5327f1f169ca3bd059d324ac91e3c05bb225e5f81655d2f5b5f0cd6389d35be14f63cf76ef856634c5c42f5f6763a457be1745d9ddc4e7a77cbe86398585dd18159eb7dadc2da143cabd5794c4caafab774c5b0ad661f6f9e7bd5163af6f214bbd6351560cfb5e9fe42d3b67912e0bb52926429a43c27aa6c52e904660029285c4b763d6becb5cd4e9a029fb092ae20df18e073627d896a8de5f89474cbc2d2a525edbaa635a9704ec9f30bc0d18dea437a986553da723befb7f91d73a9976a528d2ff2ff80aef0fb80b4c84fca0d810e1f0c3857aef2616c9908aa7dc6a02e28085ccbb88e13c8c8c1acc631e4121e39b453a5897602dfcff5629f88d75ae7375cb9d08969dc6e870870c7aaad3c62f1f39c363d7edfda2d5ce1e9e62b25cf3b31bf4da9b90616a79d3be8f031837844c13fa6ea8af83db6eaa6abcb5158c38abe7fd39b8710c7d8d830ac93d5d3cec1d038c7947861c4ea118b3c205be5c441d35ef856c9a81f970c2850397e735a2fb991fe2dd0f293224ed263963a1041dcefc67b77b25b82d6ab047eb282702ddab528cc4bfb8c82d86352057e893bfd4b41e3396d64d7f1a78f6a0d4cd420d4bf84eb791a513163f837556c1a2e7c4e84ab9bfaa3a23a7114bfd301ea1f6b5e5c94e076e8f42a4da7e05224589005625245672ef85a11d6ac4b379b72660583ccb62b3d6cf00090c9c0ef7f3e3bce7bc6e10baa0498799de647451281afb45cf053c7a57eca0732a8f9e9f02437be51649bc7d1a391aca1561fb6b2d47817394e97e426afda0fb9fdd248579b8eb768ef9e249dbef8b0ebbd0e8dec2f149e2356df3a9f728b5392875ea476b54a1c990040ef4e63373566611c5b555b5d60a0e69f32e05db3f9047ea3e261ee6e3d87516bb0fff783333eef6444c8d9d17f8b23514d6358c62cd34dbf0e9dd60f54f286c533d68f2610c82eaedd9e512884f37211f190a08cd3766c7ca6a5043ee9dbabf5994c48d03a2fa5ccedce7ffbe9cee1e9d54036ca4ca7c4fdc339011448c7aad3d14b639dc179e7a97f03b606b0e47a32b8c9ab82c59fbba5e0ab663538aba9ba71d27216614f59bdccb050cc2512f65f465e8476d36855df64b8bb181907e91f45c6262dba02b35dc238bb32b9cc7070d31f7f95f2193b5fca347874a64041ab629cb5c3a3d77ba999793badacf01c4244ae13c0d77fe01fae16c489fcd58010afc3084ffadb9bf7264f23f1ad0e8d9d762dcc431163c343054181812c9cd1a6ecdc9964caa0a2ba8cd29271e6824891129b89efc1ea2996100f1932940a49a324e8eb688d05ac7d6ba273aade15c2be8cc74ef1eafad9b9ebfdfa36edc5c6d109485a48ac6a8395ccdf23779919953cf3c61c3a635c7e782f84098f3cc6bea7644cf3924c2352c97c76bc7141227dd29f1d47ef209adc3aaefd8cf204fb265e6b262e83736c2f26b22d80870af83095338c23a47a5a86af2ae7decd1aaabd925ae900bfe8e82728e14fd82677769bc9962dbb507a61e206821ac9c0940b12d79ecb7a916b9f6573fa3d9a7ef773f66de8cf8db6536d986a29d7b50a2973d228ec48468c5ebec6253130c578e5ec2848b62e8e1082a3d584e84b86e24211a9546e1abf79e568827af5d9ba98ba7b33b5cd9cb7a81dc873ea11276049d9d6206d2ed0933ada7ef9b6823f24b756ebea834297743ffb146350f320ec9044df55b20df0ff84584c16350f465b5ad7d364f9b166fb534c2a0e65f6bb4d61feeb84463ceb4a4f7853c0c2410955881a60170b0bbc131f6699e2616752851063c7e8b0a82e4357b84e48bad8002610e5770c17ee0cb301f9dfe8d5cbb66c6962b5edcae17b5c5dd42026737ea9e2c79bfb9392d290b44d66ade6eb62e26321ee214a6d15facb7cca610b6209392179a50f3dcba1494d3f302745461f6172d329a12d68405be5ee05ad2a641a7aa3da1d1fd3198671bf1af5b39e2bdeed49df80cf0c6e0edc5c4812350097bda47d3fafb3827d73eeb0b29320c74dae6d4d61d8fc269652835f5a7f98710c644dd50d3af618651b41916bbabb9ea7cc46c8208dd7fb99474be66e1a970c899f17129a9ed17ccce0d93411e71b8f1c7790c787f7a97a50d54acbc6f4eee49a38882c34e3477c97e1c6da0b39a1e9d0d25a3cea9364033bf4f625a02412174d03dafd642526867578f71f2e52920833b8d23713d5ac48165f49545f6c7c75b5b4ef2e0682f8f2e191fdb6c0ba529856f887391f8d5aa3f7dfc5230170b97662611e53a4436bf4e98a5ceaeb16a79bb95f962b2675cb6da9f1cfcdc1ab604ef7749fe87ccb5a3660f463ff5f488b5c544cf847be84dab22d038730a7021cdc7f7ab714c1561c98a39cc92cd6aaf53c82b28665114ac18b2149ee7f1b52f894c28a49eb45d4cf6a0e65df39b3c717039ae41958fe810c1e05ad62ceef2980e0cfd891bfae0db61fb1c8d65b6812ef1bf5d426f955ab4826eae69f531979699685f5312882032a5f47ed8cf2e98e67d9f6c299d2060a04b4aa677500b48a33586b10f71293d57de846d2683621b588630a6ef06a41437bd99366787b787a68c71779132d0ee73aa5f97d5b9ca18a7ae26b7002512df1073e2eccdb4d2f137a15d9604e10547fa465aeb4f2e5899b531adeb5e72fb76c2c1c9d18ceb4a23a5f6174ba86a7119d82e35cb5a5d1c6a093351aaee0094b32b92417dc50c1d3806fffdafd2ec0e3ba176d84bdb7d59755e9083e61ded802e2a089ae9d6746f738b55845bcd4ff0a21888c2c6b972db043973fb323fd1c15e70137aa6a4bce3f60f27c1d1488f3751e5425a5776c7cc3a3c8acbfbd2171407e1a242e8e241e6e9e1287d8995265a8092ec59ad99652e63a41b744f34392017f29c1b1ca4ce7728200743d4497a70cfd2369d0ecf9e0ba6f28da25b2d918a06ad1173091b8d750b8c2120321818a0912bf47b96c9a8962930a843ea8419b24b8618b7b43482291906e151bf39d3634756d9e1ff5a6e787d1fc4be7349c38a3b882e059a5da930a9cb2a01eb8b24b54def2a2949538fc063542921947f1997dbee59842a50a043d431649ea0adde68c43259ab51592107b2618c5f761364d4d3d5d0f4d4ae1b94650cb4b695db5831c6dd789140b87525d9ed46fb8dce8fa75d68f317dfc3858d810928fb3530b7ae8701d622b0e69ab16cbbd46c8165c467850d081292da8147fe07f472776d1e2c75c17bdc0f8bafbc964da953a5efe64af69944f0f8858b2a4dece04428ede8967d0e93827910400af8a859b59579d9628191b291732bae90a3b50f8b2b7728725568a83e006ed21e940d4b7e7291ad6365138aa2d59c0b303cc298f7a70d0c39e4f17a878083631b1f96a65d7b4c5a4403929180694f55b71ba29685bdf472f0e21a1c8b3c2dbfc4892ffbc0f0f23f38ed0b785080c11b0766ffc5a0c2c750080b764df159e42ac8eb82681baec5b0ad7948153679162c223f63bf22545718accf2a30bc4402f6b54996baa00508c6def488975a2e2bf2a8dbcff49293e83f998f8baebe722cdfef96c46ac3d945d56ada194353f7cd03d2b86cb9844f7d63f008fbe553fe0023f6968e8bea9054ed3c567e5c55b283fb2337fbd20510e5e098537f5c1baa6b509f63b1e812840aaf470690894a2725f4460a106a3b0e14b12b47c3fc1a083ae7e8cd2e710b5d428b2063f7bb91105255cc0fcc8ac51398ec3df6416d283c4aba6ed44846e82be02d242c710c973c5f0a9b3b16da8a96f5cd2a164a3fa040075b0cb99944f1b34f7e79ae039d15a6c992cb40aa403de90992c064e1771f2a396734480f43b024dc799b8e242df235dc0d33cfdce41755722907f4533a1480d78e99320412326c27e15434fd3fdb19ed33a07063a8a62b39ce14be2ea1e0adadec65fcf4f19901bd801b87e90fc91f1270b420fb530b71b7aea9ad23c4a4ad28d4b63444bc2fa7b44247d5e9f0ca0209a489035b4521b5e886a419df1f9d0e27b9c5007ee75fd3909d4e0156973bdf2ff8d1a88cad1d534ba93648ecb34a30b1e760f1ee8cfb90c27c36385fd68ee48982e5f0c190e8786b7ef0e1dfd3cb1cc00efc19a92020b509d3e2c74b4265bdc765085bc49c6fc61476aa22cff375a78c59f33394cc6ff460584ebbd8dba2cbfe97feb1c9147068dbc1d3e25631ad8478d826d88c28b2cf967d07d3ff845cbb25699406d106eabd31066e9cf8abbe7598f71cca663a6f63bfb63caa95d3a363e69e9a3bc889d026df28c37e41786bf8c9a1ccc06c3499986a72bb10367f32b1b8a55365c2a5b46061b58b81c5da69ad39db6c468906f1c1225527f1b26a3dbad94b1419f3671086b061117206a634cd08beee1fcdfb4a3a7cc78b3cb1293dc900d0859505018b38033a1cc9a0051968af1f8fa60350865328b6834f9c30bb1734949fcdab62cc6904b285322da3d49f188019648cac314d65a7c57f4e25864f17e346e7ebbe411695a237622356ecc10e66c8ba33e7106a756b8d3abc1a1aababc26413adcfda74a59b9002a7e2e3edb3e7551d32c461c2e40c25cb9de751ffda44d7f353513c5bbbc473594127c09775844dec5dc922caea5532dfa98fe80d80243233a4f0c15520d9dc76da3623aabef3582380ca4d2f9558d6c71b672f259b94f26710aa1d933b3ad79c8755a96c18fcfd62a972ca80ea0d33afbfc80045ba7dab492aa06c73ea3a598b2bc6eb1549627d183c25c3486814960eb1e1b02200a92f51b8642683f88185a9ee91c6dbb576dd8a869e1338b81ec205d979242bd963308af90ec23e01d253a70440edd3ebfac8e489db0a70bb5c887f22e7a5de33918374a9ae5229d419b1948eeb23bdf8dce3c5df3b81d1a3e3b38e095f261cb9e00f5567413a5c13abb469fdf64adc830cc442a099609cf0ebd3ffe936d77d6099d816be2b4cdd31e4fdf5af5904120ec65e81138416462f9e9bbe9ba6d5980c7de01288bd9f4741848802c32f3774678367c70014e531ad7f95b5527d022232ada51148012328f1693b2d08b8eba80dc26d8e9fc369b410331ed720e410ded5bd03ce69942ffb97489a2c5b6e4da93cc73811738a141c3a16d4ff6edf2ad1b3d3ae45a21c5ca2613b92e7871dea89d3cd699b86520c80f6a391cc2911538f8108dc90203b0e74ee43a087e033265e0745a9c991facff49339c40601420bb72ef014bc4b9a51cad1dcde9f1567b4ae9d11b1416ff3d8dee15f4672bdbca4348e7e71f8d75a73851bc0ad539312b7d52c498602a5eda4630296fb40aaa90d8f6122da7fb56d02755f861df193bdc5effd8a0e54c2ef78a284f7543c2b25a81bf545be3a3f549aabe86700bf058877e3fec53813f9992814a2cebf341cedcad346dba70596da899add4d723d98366ab60997cae7e5b9d417252734d9145ab8c5ece5b5b0efdc2f2578838c500ee17b866323a951979c6f1a50da2833bc437bcddd6efaed0244df44e6069daf359289d9c50c073f0fef4be1fb3802be5ea643761ed6347a35a3f537cbde402911c28d7c7c7e6b8612facbe87221f3505ff078d0dbb28ec469fe6eba2efcb4efdcfc5745299c0850e21ee2c9ef77db8070d589c547cc7379b58677d16077093514849869ab5bf8f896fa933ba3edc676dcb73e91386cc48f01782ba635564e0f91988cf98a3a17544abfedcdc1d80540e9499bf98180feb80325194cbc369be3275ed390f8e91b8d75b1364e9fabe50a1e3b9531c3fe1aaf6523e54bb05738bd3a67ca5de01b2e479ef7678a86b13d6b747fb3cb5fe1be8913228705fc232ce422186cb79c3b66c944f6124eb414322806d47978044336221f26d3a09ed8dceb52e3c7e3413535faf1f7868cb47bbbf02c37b4cc877a1d5f4023083d5b36650b673a4e51387c64d44daf58057adaa5610d22a15329804cd51a42f663311c4e5ece9d99b5a813c4025e8e0a98c0f3ec13cf07de0b18d7e1ba7d3eb143f5825f62ae5b5f6d92b167f9dbb2177e84f23322566814296277fc2933956f818f5475b6aa031545e6e2265679d16cbedff96c4f419d5fabe99ee652feac8acf9a90771ab8ade8291b42d25ebbdc03faac02b9599fdb83621f6ae1e2e7f946520f3cff881cd600c17b4a00c08d0996f7d2bb97d35647f72b80ba8ad3b4a16cb71094b2d1193a5fa1456e4671788bc51c0d506f4809ca34620d4a75a62ddfa20ab5c4d347a08eb8784d4c572fcb473b766f5e1ce9d92db70ebee83accd58b8253da36b9542686edce545261f309144a3d64900f796620003b36ee3d44a06cc4d088f73aa45288b90476d2e1e461795d473d59500aa23a6b7724a2f0d6473dc2f0af6ea311a648e193072016e199b920bc8c0830ae18f1c17e33d73badadc0f9d34cd52b54f4d3d480a7ddfe0f140f8de1a382a4c5a722d3e0f875b69054d88b8bab94e9394ba8d28937f1ffd871d1666a377620e7f032633fe58ebc87e533bd6461b537cdde38352ece085378dd7b24fa3fd5a3dc3f5b77492e4fc91238a8bfcc4e20bb396bd3317155981ec593926f2e9f15e5ac1aa533e122441649a681d88142a93386a6ed6b2d5b18d7fb57541e31a69acee17345b08c6667ebbc53a082fbcd980b4751937ba729dd2fd9b43d06091517922dd3ea524db002db7525902a465081843191d2d7ac76adb7724ac2bb88e4cb2f3188dbf0cd47acf5011b4519ec100a44b2ee6a1dacac5aade2cdcdca777c6b5edf596b05691d247f671491f68bf2e113a7e8674309ea98ab794d05c664ade246288796270e10f4a308420a62bf0df1d1636330e88bf4cc78051e5f715c8f97b8a83119b3fb5129ac6d0733256bec96d8cf435fa005e14d88884a0ca24266a4e78e25e2519796ba31971e4d0cb44ea58c5ddf54a15e3b449642e395679fc5ba600cc6bb7f2b004bfb0d621e51f9cf16309e4a02ce4f23f4a2d225aa8c84840bf2d3522a5f7a983cfbbfe4adb62d6ea622ebb784072bc6673878c5eaa865a7657b619f48cf0c51a4b0d47b20f426adc7f8ab68238b97abf68443f0eaac3796bfd99e0bc644e4f6fc43e551eccd615db802dfb031444e09aedcb04846bb894a2cf42dd0a578dc94d727736e502194ae25bf8556373969cb7f27788b6edf5b2bf25a79c7f89289f827ed4be611d65f6bd89698b130aaadd0f2d914819f41a0185dfc73adcea80d2ee592bf32d15010cb32a95ef112bccb2b780b461637ffa1641d34e1b114cdd3dd1ceb365933efef1781f9ec620a73097594c945969c2ea036e36b2380b33599c3e1d4eb2b7f210324aee3bba5a944b71cf0246ceed878897fe00e30d0bd32b3dde08c8805e30efe39cbc9d11b97491d82fbb5d93b1997e5f3128252472ecd256b9f79611175b6f686629ee744d0ba2494607a4476ea5f934c936403509c14bddbc2403ad5d97bfed0da36707b66f39ffdcee7ab39602e740c1ca9761570cdbab5f56b2060db428921457445b15c4c92b9c4b0ebb0746936bc3053836fa884e97c96e44d18a5a52feca033ec4caf950927bf9a281ea1aacb2a8b1a1f74b20de25ad5f3e459ab8b61ba5d00eaedcb6b5467dcd8608cfd48cc8c1a01f2c9f68bc9ef9adf2fd81cb3e28277c52d58f42ea87c8896383c2fa88dd15dba7172990893fe28ad1b50095b2ca20856de64693f3a663be6e34a9ccbb09add5724c5599495d0c95d2b900444651048bf418070b324016678d694b82565931159ffc37d3eefd7b482c41637cdd69b8f7051b6e88cf87a01d26d0689057ca0f66f65a2c3fbca608f7dec52d8e41ea98d21be162eeb38b27e9465d5525e0ffac3bd989adae19bdcf98edc48ff9d9d2a2f0850fa2cac8421ee6e211b1930f9fe9cb7138e8058ae476aa93c0ca49b170eb4ebbbb6fb4020d000eae537b4dd4bdfc63e3fb281848c057b94fc14dc12f8833d5ada50c8f0178137964c3b1524c59eae7ae19066a8003b9f4036b0be91f6f24baf6839f360473907135a8eb777dfe4dcf18d15fb8e16d069c48c5a128f046667f66bb22d36e986c73d2ebaa1a9638a9e8c049d0c766e2008fb19c4aabd96e3443c48377214b01dec0f73538fa5a882553a60664e549030fc9cc21a74a73cf79cfdbbfa3676a474910a295044d804b9f6a30104fc8250da4efcfddc379c3a1b84a2050ee78b18ba84ec5cb4db62540ea7be026b48d2b9294f06aa48e44087dbc494d92fe3e8648792c2b9f5d0d580afac814f8fc74208239b5f8fa6c20fc75c9d73fbe448a4fd1eb1af10165c37e7aa72c83c47dbb92bf3203bc0bea3b3ae261636b9a6b621725aed16de5c33502f152ca3704b1e83a60cfc5807177d9e561b12f43c3ded0951c4ec7af0ab29f55e3745df0f10bedcdcee2d443c0023d7547018c94e2cbb04a5c67a81d33df4dda99f80777b1db00f91bf8abb96ca360353c08b8979d00860ee3af86988171d6739a0f546f64ec34c045afd1be790176228204782836484f6d118d734c8e1b302788aa20e704502da74cd11bc5a22bb717a1d10d5176a4426e88cc132479aa7e8370772b9776ea38d5bd217b08c50f94072acbdf93e732e6ce41f92159b626e59e39925b458465ec3b0191a56d8e1c3a76110200e38380ccfcc1a05f85608bc3ea0bdbbf326bfe003158c8c9e01e90a7ae164cc20de5b23146baa9786111", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)={0x20, 0x0, 0x3, {0x0, 0x28}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f0000002000)='./file0\x00', 0x9) fsync(r1) 1.196834699s ago: executing program 7 (id=3197): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="f78d3aff4ccae8c034c41634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2", 0x88}], 0x3}], 0x1, 0x40800) readv(r1, &(0x7f0000001b80)=[{&(0x7f00000002c0)=""/5, 0x5}, {&(0x7f0000001a00)=""/222, 0xde}], 0x2) 1.095253022s ago: executing program 7 (id=3198): unshare(0x22020600) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000380), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') poll(&(0x7f0000000240)=[{r1, 0x2000}], 0x1, 0xffffffffffbffff8) 1.032490573s ago: executing program 0 (id=3199): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.032095141s ago: executing program 1 (id=3200): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe880000000000000000000000000001ff01000000000000000000000000000100000000000000820000000033000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000001e308bba0100000000019f2b"], 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 959.903302ms ago: executing program 6 (id=3201): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0xffff}], 0x1, 0x10041, 0x0) 899.028848ms ago: executing program 1 (id=3202): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x1, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000580)="5bcbf32f24418beb0e77be1baed9bcb9a3f24591a4ed4c788bd3934b83c6d9dbc3224de947ce10efdc2912e3c527afbea818d9e12e8d4773c647efa6e2e80c5bcb9542b49fd707843624175e793adae3ec4e14b246695f214f045f007ab28865d8aeb9d2e42d9bd08e4a13fac7704b55158631b6db3354ce0f7977b1b3da032b86836fdec76de6024ada00410a6be34c2b0720862efc480dd3f88314ad0bfa058fb24f153199c4a46be8d7953b3f7ff484d1d2acdfe88920dc46d74d89711828aa95d97fea5396f774d411635996062f1c51308188969f1c8d9eb6d69b7005618984ff41cbbf194c1a65987464c2ee045df3f18cc6cd", 0xf6}, {&(0x7f0000000700)="be6152775c65f0bde227a58faeb1830c8807138a867e5a1ee148905fd9ec99ec3b79efdba1be26d5925e55f7186b26cd841a89dd0d419e242be5480a6039cb47167c190930b1d7354adc7e84f9912af44a752dcb17063c3bde94459dc949f249bba2e867a70da095efddd4ba9f7cc547006c98ecb2c5819552241f3913cf07da44852e1f7244720860167b7f5cb8084ea7668391e31a24ebf23bc4d27d99a39f0b7b7510f0c20d1f6aef6f43d6b5aa5fe8ac9b333502c8ce9913f40a1cea47263f4e8e5b9fd5d09b17d0e740c91d71a43ade121df52b2f0f4d1c5d2c964eb2f1", 0xe0}, {&(0x7f00000000c0)="be67177931ae47bcb564d2457c607c63fa71f1707f7c41a827ae9b2d96f853ad857e71f2eb594693ee090682afd9c219b7bf917bb8b59dd6a143b8cbe8ff392f11a2b1", 0x43}, {&(0x7f0000000800)="a304c2654fb7fb88b6259f412915debbc08730c34272c9f1fe75eb9012f2c238f3e18a17e2f50c8e050a6e80441b76dad6e0870e62072e0db88628b4586908d751c22461b092db8182c206180798da4bef5ec58e89a4e33c6cee4a03ac31ed284b56cf30ec8be1414408c7cf7f4f3e4d486b9d3fe6ba2da7db9bd902cfc8b769f4b0ead4ae5c331d35d8a2f805afbee9264dbc9ada76876cf821a6ec7992393a15ffa6f5ea56cdcdab1a94982ceb1ceb92ec2021b2b37f2ce4ca1399998df1c628b7a2b44380523576b9fe71a53e00742a6ef5778123cf927241eb5306166d", 0xdf}, {&(0x7f0000000900)="8a2c46cc27164ac3ae06317c07a76537685fc53d9af1c3c9c56b195f72d97ac44e7244a4e5cb4b8a6b9fd19cbd8a699d3908d7d555673f051b56d5d8123d2f2d9ba7a50bf1adc7bd186859884419fe4a6d484c08d39ce6d3519f7c7506440ca5ee44fe6164b739a40867d71879afd3ad6fc2784c6ea9d08eea9ba85f71bd451b36c39c8e2c33794564fce92ec1d50e0d94a546ef9ae9ce1ca7994441b6fff8892df0611f78e92cb2be4621fadd91037d7d2f46113271ae04fdcb49ee057aa36a155e6402106c8155e25ad89ef568207a7cf745c1d35e7749926ccc6fe1c2338963f353616c88da8c06529b070d43243b69194b82a85573197386fc7458d00232cca65718dc5742c44773eb58c0e3d67ca689a1315d39080dfba1e8bb93ea9c71c56d6a34bede0d3aa39b4ca16dd4e1a9d207f96c593d355461bc62f5fd6d1d451ebccbdeed5c001a500bb59b679ce112690795f00e9ddfb5e564be29b930a5df8cb15114d852ec2421990b1ab5edff394cc9e0d863347ff00efd17c1ec280b07caa59b1b4573588f7710e964f94c34cc872ee4427ba6c5b3807afb9024ab2cdcdb40c0da88c6d4ea073985656369b277b611bb75b811761d79e7fdc4af211256b2f3e84583d8afae78273a3f65879d72fc87a050551683efe37146dd11eb2cde7fa373bdebb527fe70def79c571ed2c6bfeb1d8a9c9929d4ef9918b3d9dc7997cc167a76b34cd6dc68f09a069746a4b96f201b960439e7f01867f6628ce11939d25f557ef9cd095b22abf12f3667b0ba23e32127264bab31c408f7ab83991831683f996c2efbd1184b14afe34034b10d769757f90bd3e9b37e790855ff19516c3eb0d4bd0759608dbc17e0c6d01f680d3f51eeeb069c1cb1903af97df32fb24dac906ec5a4afbeea90df9ad54c", 0x28d}], 0x5}}], 0x2, 0x0) 852.725013ms ago: executing program 0 (id=3203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0x8080, 0x0, 0x0) 852.484889ms ago: executing program 7 (id=3204): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x48, r2, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x48}}, 0x0) 842.967735ms ago: executing program 3 (id=3205): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000300)={0x2, 0x0, {&(0x7f0000000140)=""/25, 0x19, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000200)=""/213, 0xd5, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48) 745.205431ms ago: executing program 1 (id=3206): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x2040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x5, 0xfffffffffffffffb, 0x3, 0xe691, 0xfffffffffffffffc, 0x0, 0x2, 0x100000001, 0xfffffffffffffffe, 0xfff, 0x7ff, 0xffffffffffffffff, 0x6, 0x4], 0x80a0000, 0x6f84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 608.206917ms ago: executing program 0 (id=3207): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000003c0)={0x0, 0x3000, 0x0, r2, 0x5}) 607.926599ms ago: executing program 7 (id=3208): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000140)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0xe, @dev={0xfe, 0x80, '\x00', 0x25}, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x104, 0x4) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000480)="b48ded36af", 0x5}], 0x1}}], 0x1, 0x0) 503.025818ms ago: executing program 6 (id=3209): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 491.057433ms ago: executing program 0 (id=3210): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 391.423494ms ago: executing program 7 (id=3211): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xa0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xb3) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xfffffffdffffffff) 300.684751ms ago: executing program 3 (id=3212): r0 = io_uring_setup(0xf36, &(0x7f0000000bc0)={0x0, 0xcb41, 0x8, 0x0, 0x26c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], &(0x7f0000000080)=[0x3fffffffffff], 0x1}, 0x20) r1 = eventfd2(0x7, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040)=r1, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) 272.792806ms ago: executing program 1 (id=3213): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioprio_set$pid(0x1, 0x0, 0x4007) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xd06, 0x0, 0x2, r3}, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) 271.025042ms ago: executing program 7 (id=3214): open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r0], 0x0) 178.734398ms ago: executing program 6 (id=3215): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/57, 0x39}], 0x2}, 0x0) 86.588856ms ago: executing program 3 (id=3216): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x10000, 0x2, 0x802ce}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000002900)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x3511, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 0s ago: executing program 1 (id=3218): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB='@'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): [ 288.190243][ T5945] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 288.357735][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.385157][ T9] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 288.393403][ T5945] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 288.412190][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.424181][ T5945] usb 1-1: config 0 descriptor?? [ 288.566912][ T9] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.577615][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 288.584566][ T9] usb 5-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 288.594635][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.623137][ T9] usb 5-1: config 0 descriptor?? [ 288.653669][ T5945] usbhid 1-1:0.0: can't add hid device: -71 [ 288.664416][ T5945] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 288.682954][ T5945] usb 1-1: USB disconnect, device number 40 [ 288.929690][T10672] netlink: 'syz.3.1987': attribute type 13 has an invalid length. [ 289.059195][ T9] smartjoyplus 0003:6666:8801.0038: invalid report_size 7791 [ 289.075961][ T9] smartjoyplus 0003:6666:8801.0038: item 0 4 1 7 parsing failed [ 289.084566][ T9] smartjoyplus 0003:6666:8801.0038: parse failed [ 289.097522][ T9] smartjoyplus 0003:6666:8801.0038: probe with driver smartjoyplus failed with error -22 [ 289.136040][ T5885] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 289.300542][ T5923] usb 5-1: USB disconnect, device number 37 [ 289.308779][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 289.325326][ T5905] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 289.343693][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.357725][ T5885] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 289.367771][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.380275][ T5885] usb 1-1: config 0 descriptor?? [ 289.391559][ T5885] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 289.408059][ T5885] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 289.526183][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 289.534122][ T5905] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.544529][ T5905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 289.556595][ T5905] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 289.568861][ T5905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 289.579629][ T5905] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.593356][ T5905] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 289.602690][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.784206][T10680] fuse: Invalid uid '00000000000000001025' [ 289.834056][ T5905] usb 3-1: GET_CAPABILITIES returned 0 [ 289.841291][ T9] usb 1-1: USB disconnect, device number 41 [ 289.845796][ T5905] usbtmc 3-1:16.0: can't read capabilities [ 289.869391][ T9] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 290.088000][ T5905] usb 3-1: USB disconnect, device number 35 [ 290.300041][T10698] dummy0: Caught tx_queue_len zero misconfig [ 290.925377][ T5945] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 291.012209][ T30] audit: type=1326 audit(1768388614.574:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.1.2007" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 291.101898][T10723] batadv_slave_0: entered promiscuous mode [ 291.110624][T10722] batadv_slave_0: left promiscuous mode [ 291.133098][ T5945] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.152174][ T5945] usb 1-1: config 0 interface 0 has no altsetting 0 [ 291.159184][ T5945] usb 1-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 291.169712][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.200547][ T5945] usb 1-1: config 0 descriptor?? [ 291.479184][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2014'. [ 291.488546][T10733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.538985][T10733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.651490][ T5945] smartjoyplus 0003:6666:8801.0039: invalid report_size 7791 [ 291.659645][ T5945] smartjoyplus 0003:6666:8801.0039: item 0 4 1 7 parsing failed [ 291.670389][ T5945] smartjoyplus 0003:6666:8801.0039: parse failed [ 291.676943][ T5945] smartjoyplus 0003:6666:8801.0039: probe with driver smartjoyplus failed with error -22 [ 291.717640][T10737] bond0: entered promiscuous mode [ 291.722863][T10737] bond_slave_0: entered promiscuous mode [ 291.737972][T10737] bond_slave_1: entered promiscuous mode [ 291.744868][T10737] dummy0: entered promiscuous mode [ 291.745528][ T5885] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 291.753065][T10737] batadv0: entered promiscuous mode [ 291.768807][T10737] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 291.890347][ T9] usb 1-1: USB disconnect, device number 42 [ 291.913738][T10743] input: syz1 as /devices/virtual/input/input41 [ 291.920495][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 291.926093][T10743] input: failed to attach handler leds to device input41, error: -6 [ 291.939963][ T5885] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 291.953800][ T5885] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 291.985458][ T5885] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 292.005454][ T5945] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 292.010754][ T5885] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 292.034718][ T5885] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.051301][ T5885] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 292.060659][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.185234][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 292.193719][ T5945] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 292.210533][ T5945] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.230065][ T5945] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.276712][ T5945] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 292.291179][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.300073][ T5945] usb 3-1: Product: syz [ 292.304523][ T5945] usb 3-1: Manufacturer: syz [ 292.309943][ T5945] usb 3-1: SerialNumber: syz [ 292.346185][ T5885] usb 4-1: GET_CAPABILITIES returned 0 [ 292.351769][ T5885] usbtmc 4-1:16.0: can't read capabilities [ 292.647428][ T5923] usb 4-1: USB disconnect, device number 31 [ 292.735224][ T5945] usb 3-1: 0:2 : does not exist [ 292.851519][T10772] syzkaller1: entered promiscuous mode [ 292.857643][T10772] syzkaller1: entered allmulticast mode [ 292.924863][T10776] loop5: detected capacity change from 0 to 7 [ 292.933939][T10776] Dev loop5: unable to read RDB block 7 [ 292.942590][T10776] loop5: AHDI p1 p2 p3 [ 292.948100][T10776] loop5: partition table partially beyond EOD, truncated [ 292.956216][T10776] loop5: p1 start 50331648 is beyond EOD, truncated [ 292.965238][T10776] loop5: p2 size 1701016946 extends beyond EOD, truncated [ 293.059229][ T5984] udevd[5984]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 293.367791][ T5945] usb 3-1: 1:0: bogus dB values (-12637/-11528), disabling dB reporting [ 293.400155][ T5945] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 293.475345][ T5945] usb 3-1: USB disconnect, device number 36 [ 293.549540][ T7129] udevd[7129]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.657825][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2041'. [ 293.671414][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2041'. [ 293.905113][ T5885] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 294.065159][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 294.093653][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.127949][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 294.162814][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 294.183704][ T5885] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 294.203917][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.227605][ T5885] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 294.244257][ T5885] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 294.264032][ T5885] usb 5-1: Manufacturer: syz [ 294.287473][ T5885] usb 5-1: config 0 descriptor?? [ 294.755531][ T5885] rc_core: IR keymap rc-hauppauge not found [ 294.797419][ T5885] Registered IR keymap rc-empty [ 294.803035][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 294.825331][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 294.851457][ T5885] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 294.889430][ T5885] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input42 [ 294.935737][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 294.956283][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 294.994411][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 295.035231][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 295.075541][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 295.105242][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 295.125363][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 295.145249][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 295.165227][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 295.185312][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 295.218257][ T5885] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 295.228491][ T5885] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 295.243271][ T5885] usb 5-1: USB disconnect, device number 38 [ 295.352984][T10827] use of bytesused == 0 is deprecated and will be removed in the future, [ 295.363375][T10827] use the actual size instead. [ 295.457203][T10832] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2059'. [ 295.466372][T10832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2059'. [ 295.477441][T10832] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2059'. [ 296.148912][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2073'. [ 296.445147][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 296.445150][T10808] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 297.269852][T10808] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 297.276669][T10808] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 297.282714][T10808] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 297.288971][T10808] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 297.545160][ T5945] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 297.635768][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 297.695371][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 297.713373][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 297.729962][ T5945] usb 1-1: config 0 has an invalid interface number: 182 but max is 0 [ 297.739548][ T5945] usb 1-1: config 0 has no interface number 0 [ 297.747510][ T5945] usb 1-1: config 0 interface 182 has no altsetting 0 [ 297.757608][ T5945] usb 1-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 297.768816][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.777988][ T5945] usb 1-1: Product: syz [ 297.782520][ T5945] usb 1-1: Manufacturer: syz [ 297.788097][ T5945] usb 1-1: SerialNumber: syz [ 297.795718][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 297.803162][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 297.815238][ T5945] usb 1-1: config 0 descriptor?? [ 297.820860][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 297.826988][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2083'. [ 297.830475][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.849847][ T5945] hub 1-1:0.182: bad descriptor, ignoring hub [ 297.853848][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2083'. [ 297.861882][ T5945] hub 1-1:0.182: probe with driver hub failed with error -5 [ 297.872743][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 297.886241][ T10] usb 2-1: config 0 descriptor?? [ 297.900006][ T9] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 297.910950][T10892] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2083'. [ 297.920413][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.934032][ T9] usb 3-1: config 0 descriptor?? [ 297.957153][T10892] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2083'. [ 297.971104][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 298.077602][ T5945] kaweth 1-1:0.182: Firmware present in device. [ 298.111161][ T10] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 298.266491][ T5945] kaweth 1-1:0.182: Statistics collection: 0 [ 298.272827][ T5945] kaweth 1-1:0.182: Multicast filter limit: 0 [ 298.279540][ T5945] kaweth 1-1:0.182: MTU: 0 [ 298.284125][ T5945] kaweth 1-1:0.182: Read MAC address 00:00:00:00:00:00 [ 298.398063][ T3734] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.495937][ T3734] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.518471][T10900] syzkaller1: entered promiscuous mode [ 298.524025][T10900] syzkaller1: entered allmulticast mode [ 298.530842][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 298.619304][ T3734] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.725562][ T3734] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.899868][ T5923] usb 2-1: USB disconnect, device number 36 [ 298.917090][ T5945] kaweth 1-1:0.182: kaweth interface created at eth3 [ 298.982395][ T9] gspca_nw80x: reg_w err -71 [ 298.987461][ T9] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 299.040342][ T3734] bridge_slave_1: left allmulticast mode [ 299.048706][ T9] usb 3-1: USB disconnect, device number 37 [ 299.063382][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.065401][ T3734] bridge_slave_1: left promiscuous mode [ 299.080000][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.090203][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.111136][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.120119][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.122046][ T3734] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.183707][ T3734] bridge_slave_0: left allmulticast mode [ 299.189875][ T3734] bridge_slave_0: left promiscuous mode [ 299.197367][ T3734] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.215587][ T5885] usb 1-1: USB disconnect, device number 43 [ 299.335281][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 299.337067][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 299.400715][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2094'. [ 299.508960][ T3734] gretap0 (unregistering): left allmulticast mode [ 300.030532][ T3734] bond0 (unregistering): left promiscuous mode [ 300.051463][ T3734] bond_slave_0: left promiscuous mode [ 300.065632][ T3734] bond_slave_1: left promiscuous mode [ 300.071641][ T3734] dummy0: left promiscuous mode [ 300.190514][ T3734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.219329][ T3734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.240077][ T3734] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 300.285799][ T3734] bond0 (unregistering): Released all slaves [ 300.412105][T10934] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 300.584972][T10939] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2099'. [ 300.995778][ T9] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 301.045259][ T3734] batadv0: left promiscuous mode [ 301.073031][ T3734] hsr_slave_0: left promiscuous mode [ 301.095767][ T3734] hsr_slave_1: left promiscuous mode [ 301.101152][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d278800: rx timeout, send abort [ 301.103110][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d27bc00: rx timeout, send abort [ 301.111739][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d278800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 301.113435][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d27bc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 301.156744][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.164429][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.176140][ T5842] Bluetooth: hci2: command tx timeout [ 301.177827][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 301.193827][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 301.206237][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 301.217696][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 256, setting to 64 [ 301.229394][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 301.258940][ T9] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 301.279968][ T3734] veth1_macvtap: left promiscuous mode [ 301.285871][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.316554][ T3734] veth0_macvtap: left promiscuous mode [ 301.322434][ T3734] veth1_vlan: left promiscuous mode [ 301.329045][ T9] usb 3-1: Product: syz [ 301.333248][ T9] usb 3-1: Manufacturer: syz [ 301.345385][ T9] usb 3-1: SerialNumber: syz [ 301.350996][ T3734] veth0_vlan: left promiscuous mode [ 301.370132][ T9] usb 3-1: config 0 descriptor?? [ 301.377529][T10944] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 301.406232][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input43 [ 301.721289][ T9] usb 3-1: USB disconnect, device number 38 [ 302.386981][ T3734] team0 (unregistering): Port device team_slave_0 removed [ 302.455905][T10972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2109'. [ 302.467426][T10972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2109'. [ 302.478809][T10972] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2109'. [ 302.488430][T10972] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2109'. [ 302.805148][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 302.958174][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.970906][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.982914][ T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 302.992345][ T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 303.000662][ T9] usb 3-1: Manufacturer: syz [ 303.010122][ T9] usb 3-1: config 0 descriptor?? [ 303.245339][ T5842] Bluetooth: hci2: command tx timeout [ 303.353646][T10908] chnl_net:caif_netlink_parms(): no params data found [ 303.495113][ T5885] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 303.669102][ T5885] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 303.693399][T10908] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.711195][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.732933][T10908] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.747262][T10908] bridge_slave_0: entered allmulticast mode [ 303.753429][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.772470][T10908] bridge_slave_0: entered promiscuous mode [ 303.782800][T10908] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.790311][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 303.793296][ T3734] IPVS: stop unused estimator thread 0... [ 303.806254][T10908] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.819531][T10908] bridge_slave_1: entered allmulticast mode [ 303.822950][ T5885] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 303.837234][T10908] bridge_slave_1: entered promiscuous mode [ 303.854958][ T5885] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 303.883064][ T5885] usb 2-1: Manufacturer: syz [ 303.894195][ T9] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.003A/input/input44 [ 303.929987][ T5885] usb 2-1: config 0 descriptor?? [ 304.002362][ T9] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.003A/input/input45 [ 304.039691][T10908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.058979][ T9] input: syz Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.003A/input/input46 [ 304.078398][T10908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.102323][ T9] input: syz Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.003A/input/input47 [ 304.163189][ T9] uclogic 0003:256C:006D.003A: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 304.190554][ T9] usb 3-1: USB disconnect, device number 39 [ 304.261223][T10908] team0: Port device team_slave_0 added [ 304.305389][T10908] team0: Port device team_slave_1 added [ 304.402193][ T5885] appleir 0003:05AC:8243.003B: unknown main item tag 0x0 [ 304.532445][ T5885] appleir 0003:05AC:8243.003B: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 304.688468][ T10] usb 2-1: USB disconnect, device number 37 [ 304.730428][T11010] fido_id[11010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 304.796896][T11017] fido_id[11017]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 305.009454][T10908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.021701][T10908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.054236][T10908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.080790][T10908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.088311][T10908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.121732][T10908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.326798][ T5842] Bluetooth: hci2: command tx timeout [ 305.361635][T10908] hsr_slave_0: entered promiscuous mode [ 305.369110][T10908] hsr_slave_1: entered promiscuous mode [ 305.384555][T10908] debugfs: 'hsr0' already exists in 'hsr' [ 305.393779][T10908] Cannot create hsr debugfs directory [ 306.098345][T10908] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 306.115840][T11053] netlink: 'syz.2.2132': attribute type 1 has an invalid length. [ 306.132934][T10908] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 306.170583][T10908] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 306.184136][T11037] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2125'. [ 306.328312][T11053] 8021q: adding VLAN 0 to HW filter on device bond3 [ 306.398420][T11056] bond3: (slave geneve2): making interface the new active one [ 306.407882][T11056] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 306.452453][T10908] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 306.470567][ T75] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.506890][ T75] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.557684][ T75] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.586766][ T75] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.924607][T10908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.960938][T10908] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.993466][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.000803][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.049784][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.057111][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.360877][T10908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.406007][ T5842] Bluetooth: hci2: command tx timeout [ 307.522514][T10908] veth0_vlan: entered promiscuous mode [ 307.564061][T10908] veth1_vlan: entered promiscuous mode [ 307.652513][T10908] veth0_macvtap: entered promiscuous mode [ 307.669443][T10908] veth1_macvtap: entered promiscuous mode [ 307.711956][T10908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.762944][T10908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.790707][ T3734] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.835283][ T3734] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.866274][ T3734] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.885822][ T3734] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.182424][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.207862][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.351450][ T6216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.381653][ T6216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.387175][T11116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2147'. [ 308.410653][T11116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2147'. [ 308.434098][T11116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2147'. [ 308.985175][T11107] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 309.151466][T11107] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 309.173072][T11107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.195773][T11107] usb 2-1: Product: syz [ 309.200040][T11107] usb 2-1: Manufacturer: syz [ 309.229725][T11107] usb 2-1: SerialNumber: syz [ 309.242333][T11107] usb 2-1: config 0 descriptor?? [ 309.523284][T11107] usb 2-1: USB disconnect, device number 38 [ 310.057539][ T5833] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 310.220378][ T5833] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 310.232479][ T5833] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 310.248967][ T5833] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 90, setting to 64 [ 310.266243][ T5833] usb 6-1: config 0 interface 0 has no altsetting 0 [ 310.276213][ T5833] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 310.292496][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 310.304745][ T5833] usb 6-1: Product: syz [ 310.310158][ T5833] usb 6-1: Manufacturer: syz [ 310.314796][ T5833] usb 6-1: SerialNumber: syz [ 310.328013][ T5833] usb 6-1: config 0 descriptor?? [ 310.333907][T11148] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 310.356592][ T5833] usb 6-1: selecting invalid altsetting 0 [ 310.388007][T11107] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 310.396617][T11166] input: syz1 as /devices/virtual/input/input48 [ 310.554371][ T30] audit: type=1326 audit(1768388634.114:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11169 comm="syz.0.2171" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ad539 code=0x0 [ 310.575134][T11107] usb 3-1: Using ep0 maxpacket: 8 [ 310.585010][T11148] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 310.606190][T11107] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 310.618015][T11148] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 310.626018][T11107] usb 3-1: config 150 has no interface number 0 [ 310.630319][T11173] input: syz0 as /devices/virtual/input/input49 [ 310.635789][T11148] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 310.649036][T11107] usb 3-1: config 150 interface 204 has no altsetting 0 [ 310.658266][ T9] usb 6-1: USB disconnect, device number 2 [ 310.673901][T11107] usb 3-1: config 150 interface 1 has no altsetting 0 [ 310.682565][T11148] usb 6-1: cannot submit urb 0, error -19: no device [ 310.716097][T11107] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 310.739978][T11107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.753137][T11107] usb 3-1: Product: syz [ 310.766473][T11107] usb 3-1: Manufacturer: syz [ 310.771144][T11107] usb 3-1: SerialNumber: syz [ 311.025269][T11107] xr_serial 3-1:150.204: xr_serial converter detected [ 311.837057][T11107] usb 3-1: xr_serial converter now attached to ttyUSB0 [ 312.048974][T11107] usb 3-1: USB disconnect, device number 40 [ 312.076026][T11107] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 312.109885][T11107] xr_serial 3-1:150.204: device disconnected [ 312.725136][ T5833] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 312.954312][ T5833] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 313.066249][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.074407][ T5833] usb 1-1: Product: syz [ 313.107306][ T5833] usb 1-1: Manufacturer: syz [ 313.111960][ T5833] usb 1-1: SerialNumber: syz [ 313.197167][ T5833] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 313.263505][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2186'. [ 313.301695][ T5905] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 313.324289][T11224] netlink: 'syz.5.2186': attribute type 14 has an invalid length. [ 313.455654][T11224] vxlan0: entered promiscuous mode [ 313.469083][ T36] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.498998][ T36] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.530544][ T36] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.561158][ T36] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.748673][ T5833] usb 1-1: USB disconnect, device number 44 [ 314.026440][ T5923] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 314.195110][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 314.203262][ T5923] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.216613][ T5923] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.228341][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 314.239761][ T5923] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 314.249995][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.265537][ T5923] usb 3-1: config 0 descriptor?? [ 314.452535][ T5905] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 314.473562][ T5905] ath9k_htc: Failed to initialize the device [ 314.499869][ T5833] usb 1-1: ath9k_htc: USB layer deinitialized [ 314.548749][ T5923] usbhid 3-1:0.0: can't add hid device: -71 [ 314.567615][ T5923] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 314.590073][ T5923] usb 3-1: USB disconnect, device number 41 [ 315.588981][ T5923] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 315.769314][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.782073][ T5923] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 315.811272][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.840672][ T5923] usb 3-1: config 0 descriptor?? [ 316.067321][ T5923] usbhid 3-1:0.0: can't add hid device: -71 [ 316.081241][ T5923] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 316.108561][T11285] netlink: 'syz.5.2212': attribute type 1 has an invalid length. [ 316.109283][ T5923] usb 3-1: USB disconnect, device number 42 [ 316.224678][ T30] audit: type=1326 audit(1768388639.784:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11288 comm="syz.5.2214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 316.275723][ T30] audit: type=1326 audit(1768388639.814:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11288 comm="syz.5.2214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 316.323981][ T30] audit: type=1326 audit(1768388639.824:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11288 comm="syz.5.2214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 316.348218][ T30] audit: type=1326 audit(1768388639.824:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11288 comm="syz.5.2214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 316.401543][ T30] audit: type=1326 audit(1768388639.824:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11288 comm="syz.5.2214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 316.458060][ T30] audit: type=1326 audit(1768388639.824:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11288 comm="syz.5.2214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 316.531788][ T30] audit: type=1326 audit(1768388639.824:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11288 comm="syz.5.2214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 316.563502][ T30] audit: type=1326 audit(1768388639.824:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11288 comm="syz.5.2214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 316.590353][ T30] audit: type=1326 audit(1768388639.824:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11288 comm="syz.5.2214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 316.615105][ T5923] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 316.625173][ T30] audit: type=1326 audit(1768388639.834:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11288 comm="syz.5.2214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 316.786327][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 316.800167][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.819049][ T5923] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 316.833295][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.861244][ T5923] usb 3-1: config 0 descriptor?? [ 316.884025][ T5923] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 316.919404][ T5923] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 317.295161][ T5923] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 317.333363][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.340006][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.347850][ T5833] usb 3-1: USB disconnect, device number 43 [ 317.356674][ T5833] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 317.485453][ T5923] usb 1-1: Using ep0 maxpacket: 8 [ 317.494041][ T5923] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 317.523790][ T5923] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 317.545122][ T5923] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 317.554968][ T5923] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 317.597369][ T5923] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.629283][ T5923] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 317.639520][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.476884][T11353] usbtmc 1-1:16.0: simple usb_control_msg returned 0 [ 318.700808][ T948] usb 1-1: USB disconnect, device number 45 [ 320.995134][ T9] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 321.185840][ T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 321.215120][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.225477][ T9] usb 1-1: Product: syz [ 321.229703][ T9] usb 1-1: Manufacturer: syz [ 321.234324][ T9] usb 1-1: SerialNumber: syz [ 321.277880][ T9] usb 1-1: config 0 descriptor?? [ 321.696409][ T9] airspy 1-1:0.0: Board ID: 00 [ 321.701489][ T9] airspy 1-1:0.0: Firmware version: [ 321.782194][T11479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2268'. [ 321.797603][T11479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2268'. [ 322.505834][ T9] airspy 1-1:0.0: usb_control_msg() failed -71 request 0f [ 322.532157][ T9] airspy 1-1:0.0: Registered as swradio24 [ 322.545860][ T9] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 322.560607][ T9] usb 1-1: USB disconnect, device number 46 [ 322.878534][T11514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2283'. [ 324.307532][T11529] kvm: vcpu 1027: requested lapic timer restore with starting count register 0x390=3759311525 (7518623050 ns) > initial count (6372733808 ns). Using initial count to start timer. [ 324.545391][ T5923] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 324.626204][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2304'. [ 324.718831][ T5923] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.732442][ T5923] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 324.749392][ T5923] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 324.758655][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.766836][ T5923] usb 1-1: Product: syz [ 324.771338][ T5923] usb 1-1: Manufacturer: syz [ 324.779806][ T5923] usb 1-1: SerialNumber: syz [ 325.009893][ T5923] usb 1-1: 0:2 : does not exist [ 325.040563][ T5923] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 325.082589][ T5923] usb 1-1: USB disconnect, device number 47 [ 325.150735][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.557210][T11587] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.2314'. [ 325.585249][T11587] netlink: Unknown conntrack attr (type=2304, max=9) [ 326.023018][T11107] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 326.091995][T11609] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2325'. [ 326.095662][T11107] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 327.715093][ T5923] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 327.875822][ T5923] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 327.884950][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.928421][ T5923] usb 1-1: config 0 descriptor?? [ 327.960170][ T5923] gspca_main: spca508-2.14.0 probing 8086:0110 [ 328.170555][ T5923] gspca_spca508: reg_read err -32 [ 328.176621][ T5923] gspca_spca508: reg_read err -32 [ 328.182591][ T5923] gspca_spca508: reg_read err -32 [ 328.189323][ T5923] gspca_spca508: reg_read err -32 [ 328.396251][ T5923] gspca_spca508: reg write: error -71 [ 328.401910][ T5923] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 328.441552][ T5923] usb 1-1: USB disconnect, device number 48 [ 328.959087][T11685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2355'. [ 329.085925][ T5923] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 329.202317][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 329.202336][ T30] audit: type=1326 audit(1768388652.764:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11692 comm="syz.3.2359" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ed539 code=0x0 [ 329.258738][ T5923] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 329.270952][ T5923] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 329.280904][ T5923] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 329.296216][ T5885] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 329.310489][ T5923] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 329.320747][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 329.329352][ T5923] usb 2-1: Product: syz [ 329.333855][ T5923] usb 2-1: Manufacturer: syz [ 329.338772][ T5923] usb 2-1: SerialNumber: syz [ 329.472632][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.484433][ T5885] usb 3-1: config 0 has no interfaces? [ 329.501975][ T5885] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 329.511467][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.521730][ T5885] usb 3-1: Product: syz [ 329.527649][ T5885] usb 3-1: Manufacturer: syz [ 329.532580][ T5885] usb 3-1: SerialNumber: syz [ 329.537004][T11701] IPv4: Oversized IP packet from 127.202.26.0 [ 329.540781][ T5885] usb 3-1: config 0 descriptor?? [ 329.580483][ T5923] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 329.768783][ T9] usb 3-1: USB disconnect, device number 44 [ 329.812274][T11107] usb 2-1: USB disconnect, device number 39 [ 329.828536][T11107] usblp0: removed [ 329.885247][ T5923] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 330.035139][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 330.042185][ T5923] usb 1-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 330.053495][ T5923] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.066819][ T5923] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 330.080307][ T5923] usb 1-1: config 0 interface 0 has no altsetting 0 [ 330.087021][ T5923] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 330.096261][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.110284][ T5923] usb 1-1: config 0 descriptor?? [ 330.406120][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2366'. [ 330.418476][T11712] bridge_slave_1: left allmulticast mode [ 330.424219][T11712] bridge_slave_1: left promiscuous mode [ 330.430087][T11107] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 330.439082][T11712] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.450948][T11712] bridge_slave_0: left allmulticast mode [ 330.460601][T11712] bridge_slave_0: left promiscuous mode [ 330.469410][T11712] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.545345][ T5923] sony 0003:054C:024B.003D: hiddev0,hidraw0: USB HID v0.03 Device [HID 054c:024b] on usb-dummy_hcd.0-1/input0 [ 330.559863][ T5923] sony 0003:054C:024B.003D: failed to claim input [ 330.739023][T11107] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 330.750651][T11107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.759534][T11107] usb 4-1: Product: syz [ 330.763782][T11107] usb 4-1: Manufacturer: syz [ 330.769383][T11107] usb 4-1: SerialNumber: syz [ 330.857017][ T5923] usb 1-1: USB disconnect, device number 49 [ 330.886525][T11107] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 330.940098][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 331.368395][T11732] netlink: 'syz.5.2373': attribute type 3 has an invalid length. [ 331.405488][T11732] netlink: 'syz.5.2373': attribute type 3 has an invalid length. [ 331.787723][ T5923] usb 4-1: USB disconnect, device number 32 [ 331.814486][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2379'. [ 331.838582][T11745] vxlan0: entered promiscuous mode [ 331.855261][ T3734] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.877385][ T3734] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.892435][ T3734] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.913759][ T3734] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.968588][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 331.982181][ T9] ath9k_htc: Failed to initialize the device [ 331.989109][ T5923] usb 4-1: ath9k_htc: USB layer deinitialized [ 334.174092][T11798] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 334.231149][T11798] bond4: (slave lo): Enslaving as a backup interface with an up link [ 334.280547][T11798] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 335.306818][T11820] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 335.342403][T11820] bond1: (slave lo): Enslaving as a backup interface with an up link [ 335.371816][T11820] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 338.275096][ T5923] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 338.456001][ T5923] usb 6-1: Using ep0 maxpacket: 16 [ 338.477317][ T5923] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.516311][ T5923] usb 6-1: config 0 interface 0 has no altsetting 0 [ 338.523185][ T5923] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 338.542342][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2439'. [ 338.575093][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.583258][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2439'. [ 338.603811][ T5923] usb 6-1: config 0 descriptor?? [ 338.721276][ T30] audit: type=1326 audit(1768388662.284:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11897 comm="syz.1.2441" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 339.065173][ T5923] nzxt-smart2 0003:1E71:2009.003E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 339.527231][ T9] usb 6-1: USB disconnect, device number 3 [ 340.025436][ T948] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 340.165639][T11938] input: syz1 as /devices/virtual/input/input50 [ 340.187361][ T948] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 340.208525][ T948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.243620][ T948] usb 3-1: config 0 descriptor?? [ 340.270252][ T948] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 340.691062][ T948] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 341.198170][ T3734] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.227434][ T3734] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.297275][ T948] gspca_cpia1: usb_control_msg 05, error -71 [ 341.303488][ T948] cpia1 3-1:0.0: unexpected systemstate: 00 [ 341.321940][ T948] usb 3-1: USB disconnect, device number 45 [ 341.363762][ T3734] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.377642][ T3734] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.493781][ T3734] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.518575][ T3734] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.667539][ T3734] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.679121][ T3734] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.787964][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.797467][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.807328][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.816887][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.824967][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.134698][ T3734] bridge_slave_1: left allmulticast mode [ 342.145699][ T3734] bridge_slave_1: left promiscuous mode [ 342.151640][ T3734] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.196443][ T3734] bridge_slave_0: left allmulticast mode [ 342.202149][ T3734] bridge_slave_0: left promiscuous mode [ 342.211193][ T3734] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.501804][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2481'. [ 342.528052][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2481'. [ 342.577035][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2481'. [ 342.758895][ T30] audit: type=1326 audit(1768388666.324:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.0.2483" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ad539 code=0x0 [ 343.053637][ T3734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.067311][ T3734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.082824][ T3734] bond0 (unregistering): Released all slaves [ 343.113103][T11987] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 343.825071][ T5833] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 343.885245][ T5842] Bluetooth: hci2: command tx timeout [ 343.947745][ T3734] hsr_slave_0: left promiscuous mode [ 343.968408][ T3734] hsr_slave_1: left promiscuous mode [ 343.985119][ T5833] usb 2-1: Using ep0 maxpacket: 32 [ 343.992801][ T5833] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 344.005347][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.017572][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.028207][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.063240][ T5833] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 344.078886][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.119396][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.240133][ T3734] veth1_macvtap: left promiscuous mode [ 344.255195][ T3734] veth0_macvtap: left promiscuous mode [ 344.275153][ T3734] veth1_vlan: left promiscuous mode [ 344.280838][ T3734] veth0_vlan: left promiscuous mode [ 345.292387][ T3734] team0 (unregistering): Port device team_slave_1 removed [ 345.319317][ T5833] gspca_nw80x: reg_w err -71 [ 345.324059][ T5833] nw80x 2-1:3.0: probe with driver nw80x failed with error -71 [ 345.345978][ T5833] usb 2-1: USB disconnect, device number 40 [ 345.392880][ T3734] team0 (unregistering): Port device team_slave_0 removed [ 345.972118][ T5842] Bluetooth: hci2: command tx timeout [ 346.084122][T11978] chnl_net:caif_netlink_parms(): no params data found [ 346.278739][ T948] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 346.351060][T11978] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.377343][T11978] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.387563][T11978] bridge_slave_0: entered allmulticast mode [ 346.396187][T11978] bridge_slave_0: entered promiscuous mode [ 346.406045][T11978] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.413531][T11978] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.444218][T11978] bridge_slave_1: entered allmulticast mode [ 346.445419][ T948] usb 2-1: Using ep0 maxpacket: 16 [ 346.453089][T11978] bridge_slave_1: entered promiscuous mode [ 346.458174][ T9] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 346.473979][ T948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.492409][ T948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.502661][ T948] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 346.516170][ T948] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 346.528747][ T948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.551590][ T948] usb 2-1: config 0 descriptor?? [ 346.610241][T11978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.617765][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 346.630159][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 346.641294][T11978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.659960][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 346.676875][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 346.690505][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 346.716795][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 346.724513][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 346.736315][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 346.748742][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 346.761079][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 346.774643][T11978] team0: Port device team_slave_0 added [ 346.776557][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 346.784636][T11978] team0: Port device team_slave_1 added [ 346.806028][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 346.819712][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 346.846000][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 346.861554][T11978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.870365][T11978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.875125][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 346.905057][T11978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.908200][T11107] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 346.933290][ T9] usb 3-1: string descriptor 0 read error: -22 [ 346.945076][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 346.954937][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.962073][T11978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.972883][ T9] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 347.000771][T11978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.017578][ T948] microsoft 0003:045E:07DA.003F: ignoring exceeding usage max [ 347.047944][T11978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.063151][ T948] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.003F/input/input51 [ 347.097337][T11107] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 347.111258][T11107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.130178][T11107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.140400][T11107] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 347.163709][T11107] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 347.184721][T11107] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 347.216653][T11107] usb 1-1: Manufacturer: syz [ 347.226391][T11107] usb 1-1: config 0 descriptor?? [ 347.326022][ T948] microsoft 0003:045E:07DA.003F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 347.336750][T11978] hsr_slave_0: entered promiscuous mode [ 347.364531][T11978] hsr_slave_1: entered promiscuous mode [ 347.379330][T11978] debugfs: 'hsr0' already exists in 'hsr' [ 347.400512][ T948] usb 2-1: USB disconnect, device number 41 [ 347.410337][T11978] Cannot create hsr debugfs directory [ 347.519697][T12089] fido_id[12089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 347.661308][T11107] appleir 0003:05AC:8243.0040: unknown main item tag 0x0 [ 347.691904][T11107] appleir 0003:05AC:8243.0040: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 347.746656][ T9] usb 3-1: USB disconnect, device number 46 [ 347.754768][T12093] usb 3-1: Couldn't submit interrupt_out_urb -19 [ 348.050211][ T5842] Bluetooth: hci2: command tx timeout [ 348.173832][T11978] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 348.242583][T11978] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 348.271825][T11978] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 348.292319][T11978] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 348.451606][T11978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.482906][T11978] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.530089][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.537349][ T4242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.568713][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.576092][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.722216][T11978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.793199][T11978] veth0_vlan: entered promiscuous mode [ 348.826727][T11978] veth1_vlan: entered promiscuous mode [ 348.895594][T11978] veth0_macvtap: entered promiscuous mode [ 348.907401][T11978] veth1_macvtap: entered promiscuous mode [ 348.964479][T11978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.014084][T11978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.072360][ T6216] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.081515][ T6216] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.102624][ T6216] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.124370][ T6216] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.306956][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.340859][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.421207][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.434138][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.694726][T12140] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2471'. [ 349.714878][ T5923] usb 1-1: USB disconnect, device number 50 [ 350.126633][ T5842] Bluetooth: hci2: command tx timeout [ 351.108252][T12169] batadv_slave_1: entered promiscuous mode [ 351.174710][T12168] batadv_slave_1: left promiscuous mode [ 351.866056][T12187] netlink: 'syz.0.2527': attribute type 9 has an invalid length. [ 351.900688][T12187] netlink: 'syz.0.2527': attribute type 11 has an invalid length. [ 351.933490][T12187] netlink: 'syz.0.2527': attribute type 12 has an invalid length. [ 351.960705][T12187] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.2527'. [ 351.981823][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2527'. [ 352.394561][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2533'. [ 353.074493][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2544'. [ 353.145551][ T948] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 353.275891][T12231] input: syz1 as /devices/virtual/input/input52 [ 353.305083][T11107] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 353.318846][ T948] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 353.347881][ T948] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 353.385177][ T948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 353.417976][ T948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 353.446571][ T948] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 353.467696][ T948] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 353.477300][ T948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.494935][ T948] usb 2-1: config 0 descriptor?? [ 353.501053][T12219] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 353.508627][T11107] usb 4-1: Using ep0 maxpacket: 8 [ 353.776550][T11107] usb 4-1: unable to get BOS descriptor or descriptor too short [ 353.812463][T11107] usb 4-1: config 4 interface 0 has no altsetting 0 [ 353.839733][T11107] usb 4-1: string descriptor 0 read error: -22 [ 353.846352][T11107] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 353.862047][T11107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.919938][T11107] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 353.971458][ T948] plantronics 0003:047F:FFFF.0041: reserved main item tag 0xd [ 353.985861][T11107] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 354.012060][T11107] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 354.026151][ T948] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 354.044089][T11107] usb 4-1: media controller created [ 354.071645][T11107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 354.185079][ T5885] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 354.307124][ T948] usb 2-1: USB disconnect, device number 42 [ 354.347532][ T5885] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 354.363271][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.380650][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.390557][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 354.404769][ T5885] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 354.414019][ T5885] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 354.423292][ T5885] usb 1-1: Manufacturer: syz [ 354.430551][ T5885] usb 1-1: config 0 descriptor?? [ 354.512104][ T948] usb 4-1: USB disconnect, device number 33 [ 354.847247][ T5885] appleir 0003:05AC:8243.0042: unknown main item tag 0x0 [ 354.869686][ T5885] appleir 0003:05AC:8243.0042: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 355.107421][ T5923] usb 1-1: USB disconnect, device number 51 [ 355.126107][ T5885] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 355.299135][ T5885] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 355.307424][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 355.320110][ T5885] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.334170][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 355.346141][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 355.359241][ T5885] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 355.366918][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 355.377819][ T5885] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.389747][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 355.402931][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 355.416009][ T5885] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 355.423619][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 355.434506][ T5885] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.446808][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 355.458606][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 355.474271][ T5885] usb 2-1: string descriptor 0 read error: -22 [ 355.480966][ T5885] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 355.490351][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.534534][ T5885] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 355.903244][ T5885] usb 2-1: USB disconnect, device number 43 [ 355.914821][T12279] usb 2-1: Couldn't submit interrupt_out_urb -19 [ 357.283345][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2582'. [ 357.298427][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2582'. [ 357.312631][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2582'. [ 357.815729][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2590'. [ 357.836020][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2590'. [ 359.387008][ T5923] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 359.441761][T12375] netlink: 'syz.2.2606': attribute type 1 has an invalid length. [ 359.588704][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.625033][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.651437][ T5923] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 359.699524][ T5923] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 359.717647][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.729089][ T5923] usb 1-1: config 0 descriptor?? [ 360.179062][ T5923] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 360.382962][ T30] audit: type=1326 audit(1768388683.944:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.2.2614" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc5539 code=0x0 [ 361.521015][T12451] binder: 12450:12451 ioctl c0306201 800001c0 returned -22 [ 362.147160][ T5923] usb 1-1: USB disconnect, device number 52 [ 363.055110][ T5923] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 363.235076][ T5923] usb 1-1: Using ep0 maxpacket: 8 [ 363.262509][ T5923] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 363.291104][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.319794][ T5923] usb 1-1: Product: syz [ 363.324106][ T5923] usb 1-1: Manufacturer: syz [ 363.340049][ T5923] usb 1-1: SerialNumber: syz [ 363.357890][ T5923] usb 1-1: config 0 descriptor?? [ 363.598690][ T5923] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 364.617021][ T5923] gspca_sunplus: reg_w_riv err -71 [ 364.627882][ T5923] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 364.650905][ T5923] usb 1-1: USB disconnect, device number 53 [ 365.816169][T12571] vivid-000: disconnect [ 365.849248][T12573] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=2846233827 (22769870616 ns) > initial count (14430147192 ns). Using initial count to start timer. [ 365.875411][ T5923] vivid-000: reconnect [ 365.898864][T12573] kvm: apic: phys broadcast and lowest prio [ 365.905780][T12573] kvm: Disabled LAPIC found during irq injection [ 366.258414][ T30] audit: type=1326 audit(1768388689.824:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12583 comm="syz.6.2669" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d539 code=0x0 [ 366.415418][ T5905] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 366.565070][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 366.572328][ T5905] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 366.594007][ T5905] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 366.617327][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.646323][ T5905] usb 3-1: Product: syz [ 366.652715][ T5905] usb 3-1: Manufacturer: syz [ 366.670879][ T5905] usb 3-1: SerialNumber: syz [ 366.691761][ T5905] usb 3-1: config 0 descriptor?? [ 366.717848][ T5905] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 366.722811][T12603] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2678'. [ 366.836839][T12607] netlink: 'syz.0.2680': attribute type 9 has an invalid length. [ 366.844728][T12607] netlink: 'syz.0.2680': attribute type 11 has an invalid length. [ 366.852756][ T5923] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 366.860736][T12607] netlink: 'syz.0.2680': attribute type 12 has an invalid length. [ 366.871366][T12607] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.2680'. [ 366.895304][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2680'. [ 367.025706][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 367.032837][ T5923] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 367.058794][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.112910][ T5923] pvrusb2: Hardware description: Terratec Grabster AV400 [ 367.150239][ T5923] pvrusb2: ********** [ 367.154319][ T5923] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 367.188394][ T5923] pvrusb2: Important functionality might not be entirely working. [ 367.197572][ T5923] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 367.211123][ T5923] pvrusb2: ********** [ 367.305095][ T948] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 367.318563][ T2343] pvrusb2: Invalid write control endpoint [ 367.440627][ T2343] pvrusb2: Invalid write control endpoint [ 367.459888][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 367.471755][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 367.491986][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 367.513869][ T948] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 367.537836][ T2343] pvrusb2: Device being rendered inoperable [ 367.565166][ T948] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 367.575544][ T2343] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 367.594267][ T948] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 367.604073][ T2343] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 367.615276][ T5833] usb 2-1: USB disconnect, device number 44 [ 367.621697][ T948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.646907][ T2343] pvrusb2: Attached sub-driver cx25840 [ 367.667908][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 367.697627][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 367.730394][T12613] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 367.786465][ T5905] gspca_zc3xx: reg_w_i err -71 [ 367.937965][ T948] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 368.150452][ T5833] usb 4-1: USB disconnect, device number 34 [ 368.385461][ T5905] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 368.408685][ T5905] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 368.460200][ T5905] usb 3-1: USB disconnect, device number 47 [ 368.915148][T12652] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2699'. [ 368.924529][T12652] netlink: 'syz.6.2699': attribute type 6 has an invalid length. [ 368.933896][T12652] netlink: 'syz.6.2699': attribute type 5 has an invalid length. [ 368.942289][T12652] netlink: 'syz.6.2699': attribute type 4 has an invalid length. [ 369.390522][T12663] input: syz1 as /devices/virtual/input/input54 [ 369.634044][T12665] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2705'. [ 369.919884][T12679] input: syz1 as /devices/virtual/input/input55 [ 370.147502][ T30] audit: type=1804 audit(1768388693.714:1301): pid=12687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2715" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=45489 res=1 errno=0 [ 370.583497][ T5833] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 370.636313][ T5833] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 371.986785][ T30] audit: type=1326 audit(1768388695.544:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.6.2738" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d539 code=0x0 [ 372.575160][T11107] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 372.735071][T11107] usb 2-1: Using ep0 maxpacket: 8 [ 372.747043][T11107] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 372.775088][T11107] usb 2-1: config 0 has no interface number 0 [ 372.781241][T11107] usb 2-1: config 0 interface 191 has no altsetting 0 [ 372.798991][T11107] usb 2-1: New USB device found, idVendor=0547, idProduct=2235, bcdDevice=a2.64 [ 372.811979][T11107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.820300][T11107] usb 2-1: Product: syz [ 372.824509][T11107] usb 2-1: Manufacturer: syz [ 372.829241][T11107] usb 2-1: SerialNumber: syz [ 372.839157][T11107] usb 2-1: config 0 descriptor?? [ 372.855561][T11107] usbtest 2-1:0.191: EZ-USB device [ 372.866341][T11107] usbtest 2-1:0.191: high-speed {control bulk-in bulk-out} tests (+alt) [ 373.272388][T12781] ip6gre1: entered promiscuous mode [ 373.289098][T12781] ip6gre1: entered allmulticast mode [ 373.505622][T12786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.544726][T12786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.922582][T12797] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2760'. [ 373.959735][T12797] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2760'. [ 373.972023][ T5905] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 374.145135][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 374.152231][ T5905] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 374.162246][ T5905] usb 3-1: config 0 has no interface number 0 [ 374.168633][ T5905] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 374.182057][ T5905] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 374.193753][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.204912][ T5905] usb 3-1: Product: syz [ 374.212507][ T5905] usb 3-1: Manufacturer: syz [ 374.217697][ T5905] usb 3-1: SerialNumber: syz [ 374.228510][ T5905] usb 3-1: config 0 descriptor?? [ 374.242720][T12792] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 374.467877][T12792] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 375.180990][ T30] audit: type=1326 audit(1768388698.744:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.3.2767" exe="/root/syz-executor" sig=9 arch=40000003 syscall=20 compat=1 ip=0xf70ed539 code=0x0 [ 375.344241][ T948] usb 2-1: USB disconnect, device number 45 [ 375.484687][ T5905] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 375.495880][ T5905] asix 3-1:0.188: probe with driver asix failed with error -71 [ 375.510305][ T5905] usb 3-1: USB disconnect, device number 48 [ 375.655239][ T5923] psmouse serio2: Failed to reset mouse on : -5 [ 376.186076][T12829] kvm: user requested TSC rate below hardware speed [ 376.575239][ T5905] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 376.735248][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 376.742246][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.752727][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 376.764004][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 376.773729][ T5905] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 376.783743][ T5905] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 376.801170][ T5905] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 376.810472][ T5905] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 376.818570][ T5905] usb 4-1: Manufacturer: syz [ 376.826460][ T5905] usb 4-1: config 0 descriptor?? [ 377.115169][ T5905] rc_core: IR keymap rc-hauppauge not found [ 377.121127][ T5905] Registered IR keymap rc-empty [ 377.127406][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 377.145819][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 377.164693][ T3476] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.180889][ T3476] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.186449][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 377.190352][ T3476] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.212255][ T3476] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.223933][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input57 [ 377.239358][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 377.267100][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 377.295537][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 377.315470][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 377.335785][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 377.365285][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 377.386401][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 377.405285][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 377.425217][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 377.445377][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 377.467786][ T5905] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 377.477031][ T5905] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 377.600139][ T948] usb 4-1: USB disconnect, device number 35 [ 377.630113][T11107] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 377.805386][T11107] usb 1-1: Using ep0 maxpacket: 16 [ 377.821624][T11107] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 377.837672][T11107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 377.855807][T11107] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 377.865965][T11107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.874083][T11107] usb 1-1: Product: syz [ 377.880449][T11107] usb 1-1: Manufacturer: syz [ 377.886040][T11107] usb 1-1: SerialNumber: syz [ 377.916037][T11107] usb 1-1: config 0 descriptor?? [ 377.933613][T11107] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 377.943248][T11107] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 378.558167][T11107] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 378.565848][T11107] em28xx 1-1:0.0: Config register raw data: 0x30 [ 378.573847][T11107] em28xx 1-1:0.0: I2S Audio (3 sample rate(s)) [ 378.582533][T11107] em28xx 1-1:0.0: No AC97 audio processor [ 378.783455][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.789952][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.987182][T11107] usb 1-1: USB disconnect, device number 54 [ 379.051228][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2791'. [ 379.426821][ T5923] misc userio: Buffer overflowed, userio client isn't keeping up [ 379.447440][ T5905] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 379.635637][ T5905] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 379.656052][ T5905] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 379.679329][ T5905] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 379.697906][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.715657][T12884] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 379.724206][T12884] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 379.749736][ T5905] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 380.009123][ T9] usb 3-1: USB disconnect, device number 49 [ 380.135224][ T5905] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 380.295308][ T5905] usb 1-1: Using ep0 maxpacket: 8 [ 380.302534][ T5905] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 380.311175][ T5905] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 380.321018][ T5905] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 380.332122][ T5905] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 380.342356][ T5905] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.357819][ T5905] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 380.375048][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.536725][ T5923] input: PS/2 Generic Mouse as /devices/serio2/input/input56 [ 380.609413][ T5905] usb 1-1: usb_control_msg returned -32 [ 380.617072][ T5905] usbtmc 1-1:16.0: can't read capabilities [ 380.785153][ T5923] psmouse serio2: Failed to enable mouse on [ 381.347913][T12937] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 381.550761][ T5905] usb 1-1: USB disconnect, device number 55 [ 381.835156][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 382.007656][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.018909][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 382.068963][ T9] usb 4-1: config 1 interface 2 has no altsetting 0 [ 382.085385][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 382.094715][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.111159][ T9] usb 4-1: Product: syz [ 382.115568][ T9] usb 4-1: Manufacturer: syz [ 382.120288][ T9] usb 4-1: SerialNumber: syz [ 382.469238][ T9] usb 4-1: selecting invalid altsetting 0 [ 382.569159][ T9] usb 4-1: USB disconnect, device number 36 [ 382.587521][ T5905] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 382.749106][ T5905] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 382.777243][ T5905] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 382.825901][ T5905] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 382.852664][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.880944][ T5905] usb 1-1: Product: syz [ 382.897340][ T5905] usb 1-1: Manufacturer: syz [ 382.911239][ T5905] usb 1-1: SerialNumber: syz [ 382.938330][ T5905] usb 1-1: config 0 descriptor?? [ 382.967158][T12959] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 382.995557][T12959] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 383.272105][T12966] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2829'. [ 383.275701][T12959] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 383.309388][T12959] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 383.880483][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2835'. [ 383.892427][T12979] netlink: 'syz.6.2835': attribute type 12 has an invalid length. [ 383.903833][T12979] netlink: 'syz.6.2835': attribute type 6 has an invalid length. [ 383.943307][T12979] vxlan0: entered promiscuous mode [ 383.954646][ T4242] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.984312][ T4242] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.016325][ T12] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.047093][ T12] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.419548][ T5905] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 384.482903][ T5905] dm9601 1-1:0.0 eth9: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 384.519234][ T5905] usb 1-1: USB disconnect, device number 56 [ 384.537126][ T5905] dm9601 1-1:0.0 eth9: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 386.605089][T11107] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 386.766730][T11107] usb 1-1: Using ep0 maxpacket: 8 [ 386.784006][T11107] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 386.797525][T11107] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 386.807889][T11107] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 386.818980][T11107] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 386.855132][T11107] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.877005][T11107] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 386.888223][T11107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.120669][T11107] usb 1-1: usb_control_msg returned -32 [ 387.129697][T11107] usbtmc 1-1:16.0: can't read capabilities [ 387.178770][T11107] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 387.195968][ T5923] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 387.233666][T11107] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz1] on syz0 [ 387.365172][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 387.372933][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.389473][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 387.408009][ T5923] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 387.417737][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.435787][ T5923] usb 2-1: config 0 descriptor?? [ 387.872229][ T5923] HID 045e:07da: Invalid code 65791 type 1 [ 387.896463][T13076] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 387.914213][ T5923] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0046/input/input58 [ 387.959829][ T5923] microsoft 0003:045E:07DA.0046: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 388.097949][ T5923] usb 1-1: USB disconnect, device number 57 [ 388.746056][T11107] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 388.792185][ T5923] usb 2-1: USB disconnect, device number 46 [ 389.035916][T11107] usb 3-1: Using ep0 maxpacket: 32 [ 389.043942][T11107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.055546][T11107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.074041][T11107] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 389.084362][T11107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.116662][T11107] usb 3-1: config 0 descriptor?? [ 389.146900][T11107] hub 3-1:0.0: USB hub found [ 389.315069][ T5833] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 389.343494][T11107] hub 3-1:0.0: 1 port detected [ 389.469925][T13100] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2886'. [ 389.482643][T13100] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2886'. [ 389.492592][ T5833] usb 1-1: Using ep0 maxpacket: 8 [ 389.502507][ T5833] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 389.532977][ T5833] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 389.551912][ T5833] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 389.575385][ T5833] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 389.605347][ T5833] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.636289][ T5833] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 389.651543][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.713581][T13105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2889'. [ 389.874461][ T5833] usb 1-1: GET_CAPABILITIES returned 0 [ 389.881238][ T5833] usbtmc 1-1:16.0: can't read capabilities [ 389.986654][T11107] hub 3-1:0.0: activate --> -90 [ 389.995078][ T5923] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 390.095360][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 390.146870][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 390.154878][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 390.167706][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 390.181055][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 390.198495][ T5923] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 390.207218][ T948] usb 1-1: USB disconnect, device number 58 [ 390.208616][T13092] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 390.224123][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.240813][T13117] usbtmc 1-1:16.0: usb_control_msg returned -19 [ 390.252989][ T5923] usb 2-1: config 0 descriptor?? [ 390.255259][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 390.260994][T13107] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 390.293085][ T5923] hub 2-1:0.0: USB hub found [ 390.327614][ T9] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 390.340452][ T9] usb 4-1: config 0 has no interface number 0 [ 390.346740][ T9] usb 4-1: config 0 interface 191 has no altsetting 0 [ 390.357124][ T9] usb 4-1: New USB device found, idVendor=0547, idProduct=2235, bcdDevice=a2.64 [ 390.366645][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.374703][ T9] usb 4-1: Product: syz [ 390.380215][ T9] usb 4-1: Manufacturer: syz [ 390.384934][ T9] usb 4-1: SerialNumber: syz [ 390.395796][ T5827] usb 3-1: USB disconnect, device number 50 [ 390.406737][ T9] usb 4-1: config 0 descriptor?? [ 390.416174][ T9] usbtest 4-1:0.191: EZ-USB device [ 390.421345][ T9] usbtest 4-1:0.191: high-speed {control bulk-in bulk-out} tests (+alt) [ 390.490732][ T5923] hub 2-1:0.0: 2 ports detected [ 390.895953][ T5923] hub 2-1:0.0: set hub depth failed [ 390.911428][ T5923] usb 2-1: USB disconnect, device number 47 [ 391.378248][T13125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.028256][T13125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.559210][T13160] netlink: 'syz.2.2908': attribute type 1 has an invalid length. [ 392.735386][T13160] 8021q: adding VLAN 0 to HW filter on device bond5 [ 392.779727][T13162] bond5: (slave geneve3): making interface the new active one [ 392.809506][T13162] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 392.839802][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.860910][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.879010][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2910'. [ 392.895747][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.995481][T13171] netlink: 'syz.0.2911': attribute type 1 has an invalid length. [ 393.035149][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.073937][T13171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.094825][T13174] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 393.128187][T11107] usb 4-1: USB disconnect, device number 37 [ 395.045934][T13212] loop6: detected capacity change from 0 to 2640 [ 395.066660][ T5884] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.095174][ T5884] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.130736][T13215] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.171492][T13215] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.205059][ T5884] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.213375][T13215] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.221802][ T5884] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.231082][T13215] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.256707][ T5884] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.274900][T13215] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.292086][ T5884] ldm_validate_partition_table(): Disk read failed. [ 395.301856][ T5884] Dev loop6: unable to read RDB block 0 [ 395.314267][ T5884] loop6: unable to read partition table [ 395.378794][T13212] ldm_validate_partition_table(): Disk read failed. [ 395.416029][T13212] Dev loop6: unable to read RDB block 0 [ 395.425476][T13218] syzkaller1: entered promiscuous mode [ 395.437286][T13212] loop6: unable to read partition table [ 395.441058][T13218] syzkaller1: entered allmulticast mode [ 395.448967][T13212] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 395.699804][ T5198] ldm_validate_partition_table(): Disk read failed. [ 395.721034][ T5198] Dev loop6: unable to read RDB block 0 [ 395.736287][ T5198] loop6: unable to read partition table [ 395.841655][ T5198] ldm_validate_partition_table(): Disk read failed. [ 395.856366][ T5198] Dev loop6: unable to read RDB block 0 [ 395.872834][ T5198] loop6: unable to read partition table [ 396.745215][ T948] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 396.920069][ T948] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 396.929515][ T948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.937637][ T948] usb 2-1: Product: syz [ 396.941850][ T948] usb 2-1: Manufacturer: syz [ 396.946548][ T948] usb 2-1: SerialNumber: syz [ 396.953681][ T948] usb 2-1: config 0 descriptor?? [ 396.962337][ T948] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 396.976320][ T948] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 396.987286][ T948] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 396.997138][ T948] usb 2-1: media controller created [ 397.011496][ T948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.055807][ T948] DVB: Unable to find symbol mt352_attach() [ 397.090144][ T948] DVB: Unable to find symbol nxt6000_attach() [ 397.096349][ T948] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 397.117083][ T948] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input59 [ 397.130246][ T948] dvb-usb: schedule remote query interval to 1000 msecs. [ 397.138101][ T948] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 397.148325][ T948] dvb-usb: bulk message failed: -22 (7/0) [ 397.154081][ T948] dvb-usb: bulk message failed: -22 (7/0) [ 397.241360][T11107] usb 2-1: USB disconnect, device number 48 [ 397.281049][T11107] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 397.532897][T13247] bond0: Caught tx_queue_len zero misconfig [ 398.165118][ T5833] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 398.315125][ T5833] usb 4-1: Using ep0 maxpacket: 32 [ 398.322355][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.333915][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.343908][ T5833] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 398.353119][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.363437][ T5833] usb 4-1: config 0 descriptor?? [ 398.374374][ T5833] hub 4-1:0.0: USB hub found [ 398.488380][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2946'. [ 398.502285][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2946'. [ 398.517825][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2946'. [ 398.588923][ T5833] hub 4-1:0.0: 1 port detected [ 399.059174][ T948] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 399.280514][ T948] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 399.298939][ T948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.320060][ T948] usb 2-1: Product: syz [ 399.342562][ T948] usb 2-1: Manufacturer: syz [ 399.356719][ T948] usb 2-1: SerialNumber: syz [ 399.458690][ T5833] hub 4-1:0.0: activate --> -90 [ 399.790600][ T948] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 399.802707][ T948] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 399.851468][T13293] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 399.861878][T13293] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 399.864405][ T5885] usb 4-1: USB disconnect, device number 38 [ 399.878827][T13293] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 399.888539][T13293] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 399.897569][T13293] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 399.965174][ T5827] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 400.026594][ T948] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 400.039623][ T948] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 400.051705][ T948] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 400.063981][ T948] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 400.081758][ T948] usb 2-1: USB disconnect, device number 49 [ 400.137973][ T5827] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.161631][ T5827] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 400.187726][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.199828][ T5827] usb 1-1: config 0 descriptor?? [ 400.232675][ T5827] pwc: Askey VC010 type 2 USB webcam detected. [ 400.236772][T13295] chnl_net:caif_netlink_parms(): no params data found [ 400.540610][T13295] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.548911][T13295] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.559028][T13295] bridge_slave_0: entered allmulticast mode [ 400.567945][T13295] bridge_slave_0: entered promiscuous mode [ 400.577840][T13295] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.585497][T13295] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.592871][T13295] bridge_slave_1: entered allmulticast mode [ 400.601724][T13295] bridge_slave_1: entered promiscuous mode [ 400.640785][ T5827] pwc: recv_control_msg error -32 req 02 val 2b00 [ 400.653911][T13295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.666453][ T5827] pwc: recv_control_msg error -32 req 02 val 2700 [ 400.671957][T13295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.683042][ T5827] pwc: recv_control_msg error -32 req 02 val 2c00 [ 400.746299][T13295] team0: Port device team_slave_0 added [ 400.774714][T13295] team0: Port device team_slave_1 added [ 400.830601][T13295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.837885][T13295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.866987][T13295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.882012][T13295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.890269][T13295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.917602][ T5827] pwc: recv_control_msg error -71 req 04 val 1300 [ 400.924475][T13295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.933372][ T5827] pwc: recv_control_msg error -71 req 04 val 1400 [ 400.948090][ T5827] pwc: recv_control_msg error -71 req 02 val 2000 [ 400.955380][ T5827] pwc: recv_control_msg error -71 req 02 val 2100 [ 400.965320][ T5827] pwc: recv_control_msg error -71 req 04 val 1500 [ 400.972488][ T5827] pwc: recv_control_msg error -71 req 02 val 2500 [ 400.983443][ T5827] pwc: recv_control_msg error -71 req 02 val 2400 [ 400.992614][ T5827] pwc: recv_control_msg error -71 req 02 val 2600 [ 401.000181][ T5827] pwc: recv_control_msg error -71 req 02 val 2900 [ 401.008410][ T5827] pwc: recv_control_msg error -71 req 02 val 2800 [ 401.015603][ T5827] pwc: recv_control_msg error -71 req 04 val 1100 [ 401.022992][ T5827] pwc: recv_control_msg error -71 req 04 val 1200 [ 401.047966][ T5827] pwc: Registered as video103. [ 401.072361][ T5827] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input60 [ 401.106636][ T5827] usb 1-1: USB disconnect, device number 59 [ 401.143744][T13295] hsr_slave_0: entered promiscuous mode [ 401.163610][T13295] hsr_slave_1: entered promiscuous mode [ 401.183762][T13295] debugfs: 'hsr0' already exists in 'hsr' [ 401.204596][T13295] Cannot create hsr debugfs directory [ 401.557080][T13295] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 401.583176][T13295] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 401.599555][T13295] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 401.612713][T13295] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 401.619876][ T5923] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 401.764585][T13295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.779279][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 401.800348][ T5923] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 401.825290][T13295] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.831374][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2975'. [ 401.832782][ T5923] usb 2-1: config 0 has no interface number 0 [ 401.853256][ T5923] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 401.867264][ T6216] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.874497][ T6216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.882318][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.887098][ T6216] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.897246][ T5923] usb 2-1: Product: syz [ 401.897904][ T6216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.901886][ T5923] usb 2-1: Manufacturer: syz [ 401.916826][ T5923] usb 2-1: SerialNumber: syz [ 401.924453][ T5923] usb 2-1: config 0 descriptor?? [ 401.935703][ T5923] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 401.967457][ T5842] Bluetooth: hci4: command tx timeout [ 402.046387][ T948] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 402.084358][T13295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.182830][ T5923] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 402.185916][T13295] veth0_vlan: entered promiscuous mode [ 402.220342][T13295] veth1_vlan: entered promiscuous mode [ 402.226963][ T948] usb 1-1: Using ep0 maxpacket: 16 [ 402.228748][ T5923] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 402.234269][ T948] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 402.266896][ T948] usb 1-1: config 0 has no interface number 0 [ 402.273156][ T948] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 402.289707][ T948] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 402.308319][ T948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.339066][ T948] usb 1-1: Product: syz [ 402.343505][ T948] usb 1-1: Manufacturer: syz [ 402.353286][ T948] usb 1-1: SerialNumber: syz [ 402.386314][T13295] veth0_macvtap: entered promiscuous mode [ 402.395461][ T948] usb 1-1: config 0 descriptor?? [ 402.419276][T13295] veth1_macvtap: entered promiscuous mode [ 402.511175][T13295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.532690][T13295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.553916][ T75] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.572757][ T75] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.592798][ T75] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.606040][ T75] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.724952][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 402.725982][T11107] usb 2-1: USB disconnect, device number 50 [ 402.771263][T11107] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 402.786499][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.803146][T11107] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 402.820113][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.828819][T11107] quatech2 2-1:0.51: device disconnected [ 402.870288][ T1307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.879964][ T1307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.030346][ T948] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 403.063134][ T948] usb 1-1: USB disconnect, device number 60 [ 404.045491][ T5842] Bluetooth: hci4: command tx timeout [ 404.703392][T13405] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2999'. [ 405.105304][ T5905] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 405.296445][ T5905] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 405.320589][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.339110][ T5905] usb 2-1: Product: syz [ 405.349580][ T5905] usb 2-1: Manufacturer: syz [ 405.359455][ T5905] usb 2-1: SerialNumber: syz [ 405.377824][ T5905] usb 2-1: config 0 descriptor?? [ 406.125206][ T5842] Bluetooth: hci4: command tx timeout [ 406.276948][T13438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3011'. [ 406.314940][T13438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3011'. [ 406.648721][ T5905] usb 2-1: f81604_read: reg: 100e failed: -EPROTO [ 406.691306][ T5905] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 406.721478][ T5905] usb 2-1: USB disconnect, device number 51 [ 406.889118][ T5905] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 406.929068][ T5923] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 407.032665][ T5493] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 407.098010][ T5905] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 407.135122][ T5923] usb 8-1: Using ep0 maxpacket: 32 [ 407.157374][ T5923] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 407.194858][ T5923] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.220961][ T5923] usb 8-1: config 0 descriptor?? [ 407.222941][T13457] loop4: detected capacity change from 0 to 7 [ 407.244366][T13457] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 407.270549][ T5923] as10x_usb: device has been detected [ 407.272910][T13457] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 407.302734][T13457] loop4: p2 start 4294901760 is beyond EOD, truncated [ 407.309165][ T5923] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 407.326291][T13457] loop4: p3 start 4294836224 is beyond EOD, truncated [ 407.326329][T13457] loop4: p4 size 327680 extends beyond EOD, truncated [ 407.331339][T13457] loop4: p5 size 8323072 extends beyond EOD, truncated [ 407.382511][T13457] loop4: p6 start 8192 is beyond EOD, truncated [ 407.437538][ T5923] usb 8-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 407.518552][ T5923] as10x_usb: error during firmware upload part1 [ 407.532174][ T5923] Registered device nBox DVB-T Dongle [ 407.540464][ T5923] usb 8-1: USB disconnect, device number 2 [ 407.582997][ T7129] udevd[7129]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 407.586974][ T5884] udevd[5884]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 407.604203][ T5984] udevd[5984]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 407.622061][ T5923] Unregistered device nBox DVB-T Dongle [ 407.624525][ T5923] as10x_usb: device has been disconnected [ 408.015141][ T5827] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 408.199933][ T5827] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 408.208458][ T5842] Bluetooth: hci4: command tx timeout [ 408.226826][ T5827] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 408.245390][ T5827] usb 2-1: Product: syz [ 408.250082][ T5827] usb 2-1: Manufacturer: syz [ 408.254708][ T5827] usb 2-1: SerialNumber: syz [ 408.276107][ T5827] usb 2-1: config 0 descriptor?? [ 408.294781][ T5827] ch341 2-1:0.0: ch341-uart converter detected [ 408.937568][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3035'. [ 409.311569][ T5827] ch341-uart ttyUSB0: break control not supported, using simulated break [ 409.323302][ T5827] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 409.363049][ T5827] usb 2-1: USB disconnect, device number 52 [ 409.407752][ T5827] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 409.432678][ T5827] ch341 2-1:0.0: device disconnected [ 409.535302][ T5923] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 409.705067][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 409.750108][ T5923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.760435][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 409.777379][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 409.789280][ T5923] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 409.800276][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.816291][ T5923] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 409.825755][ T5923] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 409.834237][ T5923] usb 4-1: Manufacturer: syz [ 409.848323][ T5923] usb 4-1: config 0 descriptor?? [ 410.187226][ T5923] rc_core: IR keymap rc-hauppauge not found [ 410.193430][ T5923] Registered IR keymap rc-empty [ 410.198670][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 410.225138][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 410.266806][ T5923] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 410.327296][ T5923] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input62 [ 410.363556][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 410.396821][T13526] binder: 13524:13526 ioctl c0306201 80000b40 returned -14 [ 410.407940][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 410.445743][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 410.465169][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 410.528726][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 410.555768][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 410.575209][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 410.596199][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 410.615227][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 410.635141][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 410.659799][ T5923] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 410.679992][ T5923] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 410.936791][ T5923] usb 4-1: USB disconnect, device number 39 [ 411.311972][T13544] netlink: 'syz.0.3053': attribute type 11 has an invalid length. [ 411.592577][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3057'. [ 413.221510][T13620] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 414.131995][T13648] netlink: 'syz.1.3097': attribute type 1 has an invalid length. [ 414.193592][T13648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 414.764569][T13670] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 414.778486][T13670] block device autoloading is deprecated and will be removed. [ 415.155090][ T5885] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 415.310260][ T5885] usb 8-1: config 0 has an invalid interface number: 106 but max is 0 [ 415.329142][ T5885] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.358366][ T5885] usb 8-1: config 0 has no interface number 0 [ 415.380948][ T5885] usb 8-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 415.414686][ T5885] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 415.426382][ T5885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.443053][ T5885] usb 8-1: config 0 descriptor?? [ 415.481931][ T5885] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 415.483655][T13690] input: syz0 as /devices/virtual/input/input63 [ 415.698090][ T5985] usb 8-1: Failed to submit usb control message: -71 [ 415.698438][ T9] usb 8-1: USB disconnect, device number 3 [ 415.720010][ T5985] usb 8-1: unable to send the bmi data to the device: -71 [ 415.752258][ T5985] usb 8-1: unable to get target info from device [ 415.765431][ T5985] usb 8-1: could not get target info (-71) [ 415.772189][ T5985] usb 8-1: could not probe fw (-71) [ 415.924437][T13695] syzkaller1: entered promiscuous mode [ 415.960858][T13695] syzkaller1: entered allmulticast mode [ 416.315045][T13708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3122'. [ 416.340881][T13708] netlink: 'syz.0.3122': attribute type 10 has an invalid length. [ 416.382907][T13708] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 416.581810][T13719] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 416.611493][T13722] loop7: detected capacity change from 0 to 7 [ 416.620036][T13722] Dev loop7: unable to read RDB block 7 [ 416.633506][T13722] loop7: AHDI p3 p4 [ 416.637713][T13722] loop7: partition table partially beyond EOD, truncated [ 416.645423][T13722] loop7: p3 start 1886353253 is beyond EOD, truncated [ 417.178452][ T5885] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 417.340452][ T5885] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 417.360217][ T5885] usb 2-1: config 1 has no interface number 0 [ 417.370464][ T5885] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 417.386230][ T5885] usb 2-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 417.417597][ T5885] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 417.435045][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.444775][ T5885] usb 2-1: Product: syz [ 417.455528][ T5885] usb 2-1: Manufacturer: syz [ 417.460728][ T5885] usb 2-1: SerialNumber: syz [ 417.477467][T13731] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 417.485790][T13731] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 417.496424][ T5885] usb 2-1: Expected 3 endpoints, found: 2 [ 417.763073][ T5885] usb 2-1: USB disconnect, device number 53 [ 417.900180][T13761] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3145'. [ 417.932319][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3145'. [ 418.091297][T13761] veth1_macvtap: left promiscuous mode [ 418.275074][T13770] netlink: 'syz.7.3149': attribute type 9 has an invalid length. [ 418.325113][T13770] netlink: 'syz.7.3149': attribute type 11 has an invalid length. [ 418.354353][T13770] netlink: 'syz.7.3149': attribute type 12 has an invalid length. [ 418.362454][T13770] netlink: 210020 bytes leftover after parsing attributes in process `syz.7.3149'. [ 418.505629][T13775] netlink: 'syz.0.3152': attribute type 2 has an invalid length. [ 418.513792][T13775] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3152'. [ 419.319199][T13808] veth1_to_bridge: entered promiscuous mode [ 419.344024][T13808] veth1_to_bridge: left promiscuous mode [ 419.575103][ T5885] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 419.796455][ T5885] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 419.845108][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.855168][ T5885] usb 8-1: Product: syz [ 419.859376][ T5885] usb 8-1: Manufacturer: syz [ 419.873943][ T5885] usb 8-1: SerialNumber: syz [ 419.896877][ T5885] usb 8-1: config 0 descriptor?? [ 420.985291][ T5885] usb 8-1: non-Atmel transceiver xxxxab54 [ 421.178314][ T5885] usb 8-1: Firmware version (0.0) predates our first public release. [ 421.188547][ T5885] usb 8-1: Please update to version 0.2 or newer [ 421.199441][ T5885] usb 8-1: atusb_probe: initialization failed, error = -19 [ 421.212068][ T5885] usb 8-1: USB disconnect, device number 4 [ 422.022012][T13890] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3200'. [ 422.815223][ T5885] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 422.983306][T13926] loop7: detected capacity change from 0 to 16384 [ 422.995609][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 423.008797][ T5885] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 423.015517][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 423.018788][T13926] loop7: detected capacity change from 16384 to 16383 [ 423.031698][ T5885] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 423.035971][T13928] [ 423.041638][ T5885] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 423.043871][T13928] ===================================================== [ 423.043882][T13928] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 423.043897][T13928] syzkaller #0 Tainted: G L [ 423.043908][T13928] ----------------------------------------------------- [ 423.056278][ T5885] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 423.060643][T13928] syz.1.3218/13928 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 423.068505][ T5885] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.074080][T13928] ffff88801e7e7360 [ 423.083544][ T5885] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 423.091000][T13928] (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 423.091064][T13928] [ 423.091064][T13928] and this task is already holding: [ 423.091072][T13928] ffff88807ced3028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 423.099938][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.111899][T13928] which would create a new lock dependency: [ 423.111915][T13928] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 423.111961][T13928] [ 423.111961][T13928] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 423.111971][T13928] (&client->buffer_lock){..-.}-{3:3} [ 423.111989][T13928] [ 423.111989][T13928] ... which became SOFTIRQ-irq-safe at: [ 423.111997][T13928] lock_acquire+0x107/0x340 [ 423.112019][T13928] _raw_spin_lock+0x2e/0x40 [ 423.112049][T13928] evdev_pass_values+0xb9/0xbd0 [ 423.112068][T13928] evdev_events+0x1e6/0x340 [ 423.112086][T13928] input_pass_values+0x288/0x890 [ 423.112103][T13928] input_event_dispose+0x3e5/0x6b0 [ 423.112126][T13928] input_event+0x89/0xe0 [ 423.228321][T13928] hidinput_hid_event+0x145e/0x1e50 [ 423.233627][T13928] hid_process_event+0x4be/0x620 [ 423.238658][T13928] hid_report_raw_event+0xe91/0x1720 [ 423.244032][T13928] hid_input_report+0x44b/0x580 [ 423.248972][T13928] hid_irq_in+0x47e/0x6d0 [ 423.253399][T13928] __usb_hcd_giveback_urb+0x376/0x540 [ 423.258969][T13928] dummy_timer+0x85f/0x45b0 [ 423.263698][T13928] __hrtimer_run_queues+0x51c/0xc30 [ 423.269252][T13928] hrtimer_run_softirq+0x187/0x2b0 [ 423.274543][T13928] handle_softirqs+0x22b/0x7c0 [ 423.279409][T13928] __irq_exit_rcu+0x60/0x150 [ 423.284090][T13928] irq_exit_rcu+0x9/0x30 [ 423.288428][T13928] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 423.294328][T13928] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 423.300402][T13928] pv_native_safe_halt+0x13/0x20 [ 423.305433][T13928] default_idle+0x13/0x20 [ 423.309983][T13928] default_idle_call+0x73/0xb0 [ 423.314864][T13928] do_idle+0x1be/0x4d0 [ 423.319061][T13928] cpu_startup_entry+0x44/0x60 [ 423.323928][T13928] start_secondary+0x101/0x110 [ 423.328793][T13928] common_startup_64+0x13e/0x147 [ 423.333830][T13928] [ 423.333830][T13928] to a SOFTIRQ-irq-unsafe lock: [ 423.340851][T13928] (tasklist_lock){.+.+}-{3:3} [ 423.340879][T13928] [ 423.340879][T13928] ... which became SOFTIRQ-irq-unsafe at: [ 423.353540][T13928] ... [ 423.353554][T13928] lock_acquire+0x107/0x340 [ 423.360748][T13928] _raw_read_lock+0x36/0x50 [ 423.365349][T13928] __do_wait+0xde/0x740 [ 423.369603][T13928] do_wait+0x1e8/0x4f0 [ 423.373769][T13928] kernel_wait+0xab/0x170 [ 423.378198][T13928] call_usermodehelper_exec_work+0xbe/0x230 [ 423.384178][T13928] process_scheduled_works+0xad1/0x1770 [ 423.389850][T13928] worker_thread+0x8a0/0xda0 [ 423.394535][T13928] kthread+0x711/0x8a0 [ 423.398699][T13928] ret_from_fork+0x510/0xa50 [ 423.403478][T13928] ret_from_fork_asm+0x1a/0x30 [ 423.408352][T13928] [ 423.408352][T13928] other info that might help us debug this: [ 423.408352][T13928] [ 423.418698][T13928] Chain exists of: [ 423.418698][T13928] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 423.418698][T13928] [ 423.431861][T13928] Possible interrupt unsafe locking scenario: [ 423.431861][T13928] [ 423.440278][T13928] CPU0 CPU1 [ 423.445735][T13928] ---- ---- [ 423.451273][T13928] lock(tasklist_lock); [ 423.455603][T13928] local_irq_disable(); [ 423.462360][T13928] lock(&client->buffer_lock); [ 423.469869][T13928] lock(&new->fa_lock); [ 423.476745][T13928] [ 423.480200][T13928] lock(&client->buffer_lock); [ 423.485322][T13928] [ 423.485322][T13928] *** DEADLOCK *** [ 423.485322][T13928] [ 423.493464][T13928] 7 locks held by syz.1.3218/13928: [ 423.498752][T13928] #0: ffff888147311118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 423.508005][T13928] #1: ffff88801b3c2230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 423.518204][T13928] #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 423.528400][T13928] #3: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 423.538065][T13928] #4: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 423.547211][T13928] #5: ffff88807ced3028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 423.557394][T13928] #6: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 423.566633][T13928] [ 423.566633][T13928] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 423.577207][T13928] -> (&client->buffer_lock){..-.}-{3:3} { [ 423.582947][T13928] IN-SOFTIRQ-W at: [ 423.586931][T13928] lock_acquire+0x107/0x340 [ 423.593174][T13928] _raw_spin_lock+0x2e/0x40 [ 423.599345][T13928] evdev_pass_values+0xb9/0xbd0 [ 423.605861][T13928] evdev_events+0x1e6/0x340 [ 423.612043][T13928] input_pass_values+0x288/0x890 [ 423.618655][T13928] input_event_dispose+0x3e5/0x6b0 [ 423.626072][T13928] input_event+0x89/0xe0 [ 423.631991][T13928] hidinput_hid_event+0x145e/0x1e50 [ 423.638878][T13928] hid_process_event+0x4be/0x620 [ 423.645615][T13928] hid_report_raw_event+0xe91/0x1720 [ 423.652651][T13928] hid_input_report+0x44b/0x580 [ 423.659249][T13928] hid_irq_in+0x47e/0x6d0 [ 423.665243][T13928] __usb_hcd_giveback_urb+0x376/0x540 [ 423.672302][T13928] dummy_timer+0x85f/0x45b0 [ 423.678587][T13928] __hrtimer_run_queues+0x51c/0xc30 [ 423.685459][T13928] hrtimer_run_softirq+0x187/0x2b0 [ 423.692335][T13928] handle_softirqs+0x22b/0x7c0 [ 423.699040][T13928] __irq_exit_rcu+0x60/0x150 [ 423.705576][T13928] irq_exit_rcu+0x9/0x30 [ 423.711597][T13928] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 423.719874][T13928] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 423.727629][T13928] pv_native_safe_halt+0x13/0x20 [ 423.734243][T13928] default_idle+0x13/0x20 [ 423.740237][T13928] default_idle_call+0x73/0xb0 [ 423.746946][T13928] do_idle+0x1be/0x4d0 [ 423.752778][T13928] cpu_startup_entry+0x44/0x60 [ 423.759257][T13928] start_secondary+0x101/0x110 [ 423.765772][T13928] common_startup_64+0x13e/0x147 [ 423.772382][T13928] INITIAL USE at: [ 423.776280][T13928] lock_acquire+0x107/0x340 [ 423.782434][T13928] _raw_spin_lock+0x2e/0x40 [ 423.788515][T13928] evdev_pass_values+0xb9/0xbd0 [ 423.794947][T13928] evdev_events+0x1e6/0x340 [ 423.801107][T13928] input_pass_values+0x288/0x890 [ 423.807613][T13928] input_event_dispose+0x330/0x6b0 [ 423.814301][T13928] input_inject_event+0x1dd/0x340 [ 423.820920][T13928] evdev_write+0x2fc/0x480 [ 423.826908][T13928] vfs_write+0x27e/0xb30 [ 423.832719][T13928] ksys_write+0x145/0x250 [ 423.838626][T13928] __do_fast_syscall_32+0x1dc/0x570 [ 423.845397][T13928] do_fast_syscall_32+0x34/0x80 [ 423.851992][T13928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 423.860060][T13928] } [ 423.862648][T13928] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 423.870809][T13928] [ 423.870809][T13928] the dependencies between the lock to be acquired [ 423.870819][T13928] and SOFTIRQ-irq-unsafe lock: [ 423.884347][T13928] -> (tasklist_lock){.+.+}-{3:3} { [ 423.889738][T13928] HARDIRQ-ON-R at: [ 423.893899][T13928] lock_acquire+0x107/0x340 [ 423.900499][T13928] _raw_read_lock+0x36/0x50 [ 423.907013][T13928] __do_wait+0xde/0x740 [ 423.913182][T13928] do_wait+0x1e8/0x4f0 [ 423.919258][T13928] kernel_wait+0xab/0x170 [ 423.925603][T13928] call_usermodehelper_exec_work+0xbe/0x230 [ 423.933567][T13928] process_scheduled_works+0xad1/0x1770 [ 423.941288][T13928] worker_thread+0x8a0/0xda0 [ 423.947893][T13928] kthread+0x711/0x8a0 [ 423.954005][T13928] ret_from_fork+0x510/0xa50 [ 423.960596][T13928] ret_from_fork_asm+0x1a/0x30 [ 423.967372][T13928] SOFTIRQ-ON-R at: [ 423.971530][T13928] lock_acquire+0x107/0x340 [ 423.978209][T13928] _raw_read_lock+0x36/0x50 [ 423.984711][T13928] __do_wait+0xde/0x740 [ 423.990904][T13928] do_wait+0x1e8/0x4f0 [ 423.996987][T13928] kernel_wait+0xab/0x170 [ 424.003416][T13928] call_usermodehelper_exec_work+0xbe/0x230 [ 424.011334][T13928] process_scheduled_works+0xad1/0x1770 [ 424.019054][T13928] worker_thread+0x8a0/0xda0 [ 424.025650][T13928] kthread+0x711/0x8a0 [ 424.031807][T13928] ret_from_fork+0x510/0xa50 [ 424.038406][T13928] ret_from_fork_asm+0x1a/0x30 [ 424.045268][T13928] INITIAL USE at: [ 424.049341][T13928] lock_acquire+0x107/0x340 [ 424.055756][T13928] _raw_write_lock_irq+0x3d/0x50 [ 424.062615][T13928] copy_process+0x2185/0x3950 [ 424.069292][T13928] kernel_clone+0x21e/0x820 [ 424.075804][T13928] user_mode_thread+0xdd/0x140 [ 424.082482][T13928] rest_init+0x23/0x300 [ 424.088568][T13928] start_kernel+0x381/0x3d0 [ 424.095001][T13928] x86_64_start_reservations+0x24/0x30 [ 424.102495][T13928] x86_64_start_kernel+0x143/0x1c0 [ 424.109635][T13928] common_startup_64+0x13e/0x147 [ 424.116588][T13928] INITIAL READ USE at: [ 424.121199][T13928] lock_acquire+0x107/0x340 [ 424.128144][T13928] _raw_read_lock+0x36/0x50 [ 424.135084][T13928] __do_wait+0xde/0x740 [ 424.141689][T13928] do_wait+0x1e8/0x4f0 [ 424.148113][T13928] kernel_wait+0xab/0x170 [ 424.154796][T13928] call_usermodehelper_exec_work+0xbe/0x230 [ 424.163123][T13928] process_scheduled_works+0xad1/0x1770 [ 424.171194][T13928] worker_thread+0x8a0/0xda0 [ 424.178127][T13928] kthread+0x711/0x8a0 [ 424.184551][T13928] ret_from_fork+0x510/0xa50 [ 424.191666][T13928] ret_from_fork_asm+0x1a/0x30 [ 424.198788][T13928] } [ 424.201460][T13928] ... key at: [] tasklist_lock+0x18/0x40 [ 424.209411][T13928] ... acquired at: [ 424.213393][T13928] _raw_read_lock+0x36/0x50 [ 424.218236][T13928] send_sigurg+0x12b/0x420 [ 424.222846][T13928] sk_send_sigurg+0x6c/0x2e0 [ 424.227628][T13928] queue_oob+0x420/0x4f0 [ 424.232146][T13928] unix_stream_sendmsg+0xc32/0xde0 [ 424.237695][T13928] __sock_sendmsg+0x21c/0x270 [ 424.242554][T13928] ____sys_sendmsg+0x52d/0x820 [ 424.247496][T13928] ___sys_sendmsg+0x21f/0x2a0 [ 424.252359][T13928] __sys_sendmmsg+0x28e/0x430 [ 424.257299][T13928] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 424.263039][T13928] __do_fast_syscall_32+0x1dc/0x570 [ 424.268503][T13928] do_fast_syscall_32+0x34/0x80 [ 424.273569][T13928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 424.280338][T13928] [ 424.282922][T13928] -> (&f_owner->lock){....}-{3:3} { [ 424.288321][T13928] INITIAL USE at: [ 424.292388][T13928] lock_acquire+0x107/0x340 [ 424.298633][T13928] _raw_write_lock_irq+0x3d/0x50 [ 424.305612][T13928] __f_setown+0x67/0x370 [ 424.311653][T13928] generic_setlease+0xb6c/0xea0 [ 424.318278][T13928] do_fcntl_add_lease+0x34d/0x460 [ 424.325455][T13928] fcntl_setlease+0x123/0x180 [ 424.332143][T13928] do_fcntl+0x867/0x1a50 [ 424.338144][T13928] do_compat_fcntl64+0x477/0x720 [ 424.344873][T13928] __do_fast_syscall_32+0x1dc/0x570 [ 424.351936][T13928] do_fast_syscall_32+0x34/0x80 [ 424.358905][T13928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 424.367129][T13928] INITIAL READ USE at: [ 424.371569][T13928] lock_acquire+0x107/0x340 [ 424.378259][T13928] _raw_read_lock_irqsave+0x48/0x60 [ 424.385764][T13928] send_sigio+0x38/0x370 [ 424.392220][T13928] dnotify_handle_event+0x169/0x440 [ 424.399877][T13928] fsnotify+0x1668/0x1ab0 [ 424.406835][T13928] __fsnotify_parent+0x4c9/0x5d0 [ 424.413955][T13928] vfs_write+0x854/0xb30 [ 424.420461][T13928] ksys_write+0x145/0x250 [ 424.426969][T13928] __do_fast_syscall_32+0x1dc/0x570 [ 424.434495][T13928] do_fast_syscall_32+0x34/0x80 [ 424.441748][T13928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 424.450602][T13928] } [ 424.453296][T13928] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 424.462341][T13928] ... acquired at: [ 424.466437][T13928] _raw_read_lock_irqsave+0x48/0x60 [ 424.471828][T13928] send_sigio+0x38/0x370 [ 424.476255][T13928] kill_fasync+0x24d/0x4d0 [ 424.480941][T13928] sock_wake_async+0x137/0x160 [ 424.485878][T13928] sock_def_readable+0x3c1/0x530 [ 424.491018][T13928] queue_oob+0x452/0x4f0 [ 424.495466][T13928] unix_stream_sendmsg+0xc32/0xde0 [ 424.500855][T13928] __sock_sendmsg+0x21c/0x270 [ 424.505736][T13928] ____sys_sendmsg+0x52d/0x820 [ 424.510719][T13928] ___sys_sendmsg+0x21f/0x2a0 [ 424.515585][T13928] __sys_sendmmsg+0x28e/0x430 [ 424.520473][T13928] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 424.526478][T13928] __do_fast_syscall_32+0x1dc/0x570 [ 424.531876][T13928] do_fast_syscall_32+0x34/0x80 [ 424.537096][T13928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 424.543694][T13928] [ 424.546024][T13928] -> (&new->fa_lock){....}-{3:3} { [ 424.551255][T13928] INITIAL USE at: [ 424.555261][T13928] lock_acquire+0x107/0x340 [ 424.561425][T13928] _raw_write_lock_irq+0x3d/0x50 [ 424.568032][T13928] fasync_remove_entry+0xf1/0x1c0 [ 424.574912][T13928] lease_modify+0x1ca/0x3c0 [ 424.580998][T13928] locks_remove_file+0x4bf/0xe20 [ 424.587878][T13928] __fput+0x3ab/0xa70 [ 424.593549][T13928] fput_close_sync+0x113/0x220 [ 424.599919][T13928] __ia32_sys_close+0x7f/0x110 [ 424.606279][T13928] __do_fast_syscall_32+0x1dc/0x570 [ 424.613161][T13928] do_fast_syscall_32+0x34/0x80 [ 424.619607][T13928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 424.627516][T13928] INITIAL READ USE at: [ 424.631873][T13928] lock_acquire+0x107/0x340 [ 424.638489][T13928] _raw_read_lock_irqsave+0x48/0x60 [ 424.645705][T13928] kill_fasync+0x199/0x4d0 [ 424.652139][T13928] do_splice+0xf79/0x1660 [ 424.659287][T13928] __se_sys_splice+0x2e1/0x460 [ 424.666063][T13928] __do_fast_syscall_32+0x1dc/0x570 [ 424.673267][T13928] do_fast_syscall_32+0x34/0x80 [ 424.680316][T13928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 424.688662][T13928] } [ 424.691182][T13928] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 424.699872][T13928] ... acquired at: [ 424.703693][T13928] _raw_read_lock_irqsave+0x48/0x60 [ 424.709107][T13928] kill_fasync+0x199/0x4d0 [ 424.713817][T13928] evdev_pass_values+0x627/0xbd0 [ 424.719025][T13928] evdev_events+0x1e6/0x340 [ 424.723722][T13928] input_pass_values+0x288/0x890 [ 424.728906][T13928] input_event_dispose+0x330/0x6b0 [ 424.734404][T13928] input_inject_event+0x1dd/0x340 [ 424.739849][T13928] evdev_write+0x2fc/0x480 [ 424.744563][T13928] vfs_write+0x27e/0xb30 [ 424.749004][T13928] ksys_write+0x145/0x250 [ 424.753532][T13928] __do_fast_syscall_32+0x1dc/0x570 [ 424.758977][T13928] do_fast_syscall_32+0x34/0x80 [ 424.764031][T13928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 424.770557][T13928] [ 424.772897][T13928] [ 424.772897][T13928] stack backtrace: [ 424.778814][T13928] CPU: 0 UID: 0 PID: 13928 Comm: syz.1.3218 Tainted: G L syzkaller #0 PREEMPT(full) [ 424.778843][T13928] Tainted: [L]=SOFTLOCKUP [ 424.778849][T13928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 424.778859][T13928] Call Trace: [ 424.778869][T13928] [ 424.778876][T13928] dump_stack_lvl+0xe8/0x150 [ 424.778902][T13928] __lock_acquire+0x2a95/0x2cf0 [ 424.778925][T13928] ? kill_fasync+0x199/0x4d0 [ 424.778948][T13928] lock_acquire+0x107/0x340 [ 424.778962][T13928] ? kill_fasync+0x199/0x4d0 [ 424.778986][T13928] ? do_raw_spin_lock+0x121/0x290 [ 424.779007][T13928] ? evdev_pass_values+0xb9/0xbd0 [ 424.779025][T13928] _raw_read_lock_irqsave+0x48/0x60 [ 424.779041][T13928] ? kill_fasync+0x199/0x4d0 [ 424.779063][T13928] kill_fasync+0x199/0x4d0 [ 424.779085][T13928] ? kill_fasync+0x53/0x4d0 [ 424.779107][T13928] evdev_pass_values+0x627/0xbd0 [ 424.779125][T13928] ? evdev_pass_values+0x681/0xbd0 [ 424.779143][T13928] evdev_events+0x1e6/0x340 [ 424.779158][T13928] ? evdev_events+0x79/0x340 [ 424.779173][T13928] ? input_pass_values+0x8d/0x890 [ 424.779187][T13928] input_pass_values+0x288/0x890 [ 424.779204][T13928] ? input_handle_event+0x70c/0xf30 [ 424.779227][T13928] input_event_dispose+0x330/0x6b0 [ 424.779250][T13928] input_inject_event+0x1dd/0x340 [ 424.779271][T13928] ? input_inject_event+0xb6/0x340 [ 424.779293][T13928] evdev_write+0x2fc/0x480 [ 424.779311][T13928] ? __pfx_evdev_write+0x10/0x10 [ 424.779328][T13928] ? bpf_lsm_file_permission+0x9/0x20 [ 424.779344][T13928] ? security_file_permission+0x75/0x290 [ 424.779361][T13928] ? rw_verify_area+0x255/0x4d0 [ 424.779385][T13928] ? __pfx_evdev_write+0x10/0x10 [ 424.779401][T13928] vfs_write+0x27e/0xb30 [ 424.779418][T13928] ? __pfx_vfs_write+0x10/0x10 [ 424.779432][T13928] ? __fget_files+0x2a/0x420 [ 424.779461][T13928] ? __fget_files+0x2a/0x420 [ 424.779480][T13928] ? __fget_files+0x3a0/0x420 [ 424.779498][T13928] ? __fget_files+0x2a/0x420 [ 424.779519][T13928] ksys_write+0x145/0x250 [ 424.779534][T13928] ? __pfx_ksys_write+0x10/0x10 [ 424.779551][T13928] __do_fast_syscall_32+0x1dc/0x570 [ 424.779570][T13928] ? lockdep_hardirqs_on+0x7b/0x110 [ 424.779586][T13928] ? do_fast_syscall_32+0x34/0x80 [ 424.779604][T13928] ? irqentry_exit+0x10f/0x670 [ 424.779621][T13928] do_fast_syscall_32+0x34/0x80 [ 424.779639][T13928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 424.779658][T13928] RIP: 0023:0xf707d539 [ 424.779673][T13928] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 424.779688][T13928] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 424.779708][T13928] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 424.779726][T13928] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 424.779736][T13928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 424.779746][T13928] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 424.779756][T13928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 424.779771][T13928] [ 425.143027][ T5885] usb 1-1: usb_control_msg returned -32 [ 425.148922][ T5885] usbtmc 1-1:16.0: can't read capabilities [ 425.355093][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 425.362579][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.372797][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 425.383519][ T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 425.392671][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.400822][ T9] usb 8-1: Product: syz [ 425.405327][ T9] usb 8-1: Manufacturer: syz [ 425.409934][ T9] usb 8-1: SerialNumber: syz [ 425.621498][ T9] usb 8-1: 0:2 : does not exist [ 425.629085][ T9] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 425.655835][ T9] usb 8-1: USB disconnect, device number 5 [ 425.688220][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.985949][T13931] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 426.130994][ T9] usb 1-1: USB disconnect, device number 61